diff --git a/.github/workflows/cla-check.yml b/.github/workflows/cla-check.yml
index aeef9a8..6b767cc 100644
--- a/.github/workflows/cla-check.yml
+++ b/.github/workflows/cla-check.yml
@@ -1,10 +1,10 @@
 name: cla-check
 
-on: [pull_request_target]
+on: [pull_request]
 
 jobs:
   cla-check:
     runs-on: ubuntu-latest
     steps:
       - name: Check if CLA signed
-        uses: canonical/has-signed-canonical-cla@v1
+        uses: canonical/has-signed-canonical-cla@v2