only send from main

Author: yeikel

.github/workflows/cve_checks.yml

@@ -1,6 +1,6 @@
 name: "Infra: CVE checks"
 on:
-  pull_request_target:
+  pull_request:
   push:
     branches: [ "main" ]
   workflow_dispatch:
@@ -74,7 +74,7 @@ jobs:
 
   notify:
     needs: check-cves
-    if: ${{ always() && needs.build-and-test.result == 'failure' }}
+    if: ${{ always() && needs.build-and-test.result == 'failure' && github.event_name == 'schedule' }}
     uses: ./.github/workflows/infra_discord_hook.yml
     with:
       message: "Attention! CVE checks run failed! Please fix them CVEs :("