diff --git a/.github/workflows/check-flake.yml b/.github/workflows/check-flake.yml
index aeedc194..11bfd385 100644
--- a/.github/workflows/check-flake.yml
+++ b/.github/workflows/check-flake.yml
@@ -1,8 +1,8 @@
 name: Check Nix flake
 on:
-  pull_request_target:
+  pull_request:
     paths:
-      - '*.nix'
+      - '**.nix'
       - flake.lock
   push:
     branches: