diff --git a/.github/workflows/l10n.yml b/.github/workflows/l10n.yml
index 3d89758981fe46..b3e1c047975c01 100644
--- a/.github/workflows/l10n.yml
+++ b/.github/workflows/l10n.yml
@@ -1,6 +1,6 @@
 name: git-l10n
 
-on: [push, pull_request_target]
+on: [push, pull_request]
 
 # Avoid unnecessary builds. Unlike the main CI jobs, these are not
 # ci-configurable (but could be).
@@ -21,7 +21,7 @@ jobs:
       - name: Setup base and head objects
         id: setup-tips
         run: |
-          if test "${{ github.event_name }}" = "pull_request_target"
+          if test "${{ github.event_name }}" = "pull_request"
           then
             base=${{ github.event.pull_request.base.sha }}
             head=${{ github.event.pull_request.head.sha }}
@@ -67,7 +67,7 @@ jobs:
         with:
           go-version: '>=1.16'
       - name: Install git-po-helper
-        run: go install github.com/git-l10n/git-po-helper@main
+        run: go install github.com/dscho/git-po-helper@a759aa57e9466fbd75df2fd705c02e1b91ed4823
       - name: Install other dependencies
         run: |
           sudo apt-get update -q &&
@@ -94,7 +94,7 @@ jobs:
         uses: mshick/add-pr-comment@v2
         if: >-
           always() &&
-          github.event_name == 'pull_request_target' &&
+          github.event_name == 'pull_request' &&
           env.COMMENT_BODY != ''
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}