diff --git a/.github/workflows/eks-tunnel.yaml b/.github/workflows/eks-tunnel.yaml
index 3489666175..684d8425c4 100644
--- a/.github/workflows/eks-tunnel.yaml
+++ b/.github/workflows/eks-tunnel.yaml
@@ -2,7 +2,7 @@ name: EKS (tunnel)
 
 # Any change in triggers needs to be reflected in the concurrency group.
 on:
-  pull_request_target: {}
+  pull_request: {}
   # Run every 6 hours
   schedule:
     - cron:  '30 1/6 * * *'
@@ -112,7 +112,7 @@ jobs:
           kubectl -n kube-system wait job/cilium-cli --for=condition=complete --timeout=10m
 
       - name: Post-test information gathering
-        if: ${{ failure() }}
+        if: ${{ always() }}
         run: |
           echo "=== Retrieve in-cluster jobs logs ==="
           kubectl logs --timestamps -n kube-system job/cilium-cli-install
diff --git a/.github/workflows/eks.yaml b/.github/workflows/eks.yaml
index 98dbbbacb4..3e93654665 100644
--- a/.github/workflows/eks.yaml
+++ b/.github/workflows/eks.yaml
@@ -2,7 +2,7 @@ name: EKS (ENI)
 
 # Any change in triggers needs to be reflected in the concurrency group.
 on:
-  pull_request_target: {}
+  pull_request: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 1/6 * * *'
@@ -112,7 +112,7 @@ jobs:
           kubectl -n kube-system wait job/cilium-cli --for=condition=complete --timeout=10m
 
       - name: Post-test information gathering
-        if: ${{ failure() }}
+        if: ${{ always() }}
         run: |
           echo "=== Retrieve in-cluster jobs logs ==="
           kubectl logs --timestamps -n kube-system job/cilium-cli-install
diff --git a/.github/workflows/externalworkloads.yaml b/.github/workflows/externalworkloads.yaml
index 147bc52eb9..9d8712a0cc 100644
--- a/.github/workflows/externalworkloads.yaml
+++ b/.github/workflows/externalworkloads.yaml
@@ -2,7 +2,7 @@ name: External Workloads
 
 # Any change in triggers needs to be reflected in the concurrency group.
 on:
-  pull_request_target: {}
+  pull_request: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 4/6 * * *'
@@ -153,7 +153,7 @@ jobs:
           kubectl -n kube-system wait job/cilium-cli --for=condition=complete --timeout=10m
 
       - name: Post-test information gathering
-        if: ${{ failure() }}
+        if: ${{ always() }}
         run: |
           echo "=== Retrieve in-cluster jobs logs ==="
           kubectl logs --timestamps -n kube-system job/cilium-cli-install
diff --git a/.github/workflows/gke.yaml b/.github/workflows/gke.yaml
index fd7ef3f939..1b4bd9821b 100644
--- a/.github/workflows/gke.yaml
+++ b/.github/workflows/gke.yaml
@@ -2,7 +2,7 @@ name: GKE
 
 # Any change in triggers needs to be reflected in the concurrency group.
 on:
-  pull_request_target: {}
+  pull_request: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 2/6 * * *'
@@ -94,7 +94,7 @@ jobs:
           kubectl -n kube-system wait job/cilium-cli --for=condition=complete --timeout=15m
 
       - name: Post-test information gathering
-        if: ${{ failure() }}
+        if: ${{ always() }}
         run: |
           echo "=== Retrieve in-cluster jobs logs ==="
           kubectl logs --timestamps -n kube-system job/cilium-cli
diff --git a/.github/workflows/multicluster.yaml b/.github/workflows/multicluster.yaml
index fcb967a01a..5ef72d7f07 100644
--- a/.github/workflows/multicluster.yaml
+++ b/.github/workflows/multicluster.yaml
@@ -2,7 +2,7 @@ name: Multicluster
 
 # Any change in triggers needs to be reflected in the concurrency group.
 on:
-  pull_request_target: {}
+  pull_request: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 3/6 * * *'
@@ -129,7 +129,7 @@ jobs:
           kubectl -n kube-system wait job/cilium-cli --for=condition=complete --timeout=20m
 
       - name: Post-test information gathering
-        if: ${{ failure() }}
+        if: ${{ always() }}
         run: |
           echo "=== Retrieve in-cluster jobs logs ==="
           kubectl logs --timestamps -n kube-system job/cilium-cli