diff --git a/.github/workflows/mega-linter.yml b/.github/workflows/mega-linter.yml
index 6a106a0fc68..edaee8c9344 100644
--- a/.github/workflows/mega-linter.yml
+++ b/.github/workflows/mega-linter.yml
@@ -32,6 +32,7 @@ jobs:
           fetch-depth: 0
           # So we can use secrets.ALIBUILD_GITHUB_TOKEN to push later.
           persist-credentials: false
+          allow-unsafe-pr-checkout: true # needed for pull_request_target
 
       # MegaLinter
       - name: MegaLinter
diff --git a/.github/workflows/o2-linter.yml b/.github/workflows/o2-linter.yml
index 6f920deed24..1af5915fa89 100644
--- a/.github/workflows/o2-linter.yml
+++ b/.github/workflows/o2-linter.yml
@@ -34,6 +34,7 @@ jobs:
         with:
           ref: ${{ env.BRANCH_HEAD }}
           fetch-depth: 0 # needed to get the full history
+          allow-unsafe-pr-checkout: true # needed for pull_request_target
       - name: Run tests
         id: linter
         run: |