diff --git a/.github/workflows/check-feed-urls.yaml b/.github/workflows/check-feed-urls.yaml
index bff94cbd1..884ed72f7 100644
--- a/.github/workflows/check-feed-urls.yaml
+++ b/.github/workflows/check-feed-urls.yaml
@@ -1,7 +1,7 @@
 name: Check feed URLs in changed DMFR files
 
 on:
-  pull_request:
+  pull_request_target:
     paths:
       - 'feeds/*.dmfr.json'
     types: [opened, synchronize]
diff --git a/.github/workflows/format.yaml b/.github/workflows/format.yaml
index 4dd89713a..34b42b89e 100644
--- a/.github/workflows/format.yaml
+++ b/.github/workflows/format.yaml
@@ -1,6 +1,6 @@
 name: Comment on PRs that need DMFR formatting changes
 on: 
-  pull_request:
+  pull_request_target:
     paths:
       - '**.dmfr.json'
 permissions:
diff --git a/.github/workflows/update-gbfs.yml b/.github/workflows/update-gbfs.yaml
similarity index 100%
rename from .github/workflows/update-gbfs.yml
rename to .github/workflows/update-gbfs.yaml
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yaml
similarity index 94%
rename from .github/workflows/validate.yml
rename to .github/workflows/validate.yaml
index d2250f0fa..d630d47ca 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yaml
@@ -1,5 +1,5 @@
 name: Validate
-on: [push, pull_request, workflow_dispatch]
+on: [push, pull_request_target, workflow_dispatch]
 jobs:
   build:
     runs-on: ubuntu-latest