adjust GHA to trigger on PR and not pull_request_target (#653)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

#### Which issue(s) this PR fixes
<!--
Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.
-->

Author: frewilhelm

.github/workflows/components.yaml

@@ -1,7 +1,9 @@
 name: component CTFs
 
 on:
-  pull_request_target:
+  pull_request:
+    branches:
+      -main
   push:
     branches:
       - main
@@ -36,6 +38,4 @@ jobs:
         with:
           go-version-file: '${{ github.workspace }}/go.mod'
       - name: CTF
-        run: |
-          cd component/
-          PATH=$PATH:$(go env GOPATH)/bin make ocm && make ctf
+        run: PATH=$PATH:$(go env GOPATH)/bin make -C component/ ctf

component/Makefile

@@ -28,7 +28,7 @@ endif
 SHELL = /usr/bin/env bash -o pipefail
 .SHELLFLAGS = -ec
 
-OCM_CLI_VERSION ?= 0.15.0
+OCM_CLI_VERSION ?= 0.24.0
 
 ## Location to install dependencies to
 LOCALBIN ?= $(shell pwd)/bin