diff --git a/.github/workflows/update-pr-metadata.yml b/.github/workflows/update-pr-metadata.yml
index d85546c11..c7c3fdb54 100644
--- a/.github/workflows/update-pr-metadata.yml
+++ b/.github/workflows/update-pr-metadata.yml
@@ -1,8 +1,6 @@
 name: Update Metadata
 
 on:
-  pull_request:
-    types: [opened, edited, synchronize, reopened]
   # CAREFUL! https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
   pull_request_target:
     types: [opened, edited, synchronize, reopened]
@@ -38,6 +36,8 @@ jobs:
     steps:
       - uses: actions/checkout@v3
         with:
+          # https://github.com/actions/checkout/issues/518#issuecomment-890401887
+          ref: refs/pull/${{ github.event.number }}/merge
           fetch-depth: 0
           persist-credentials: false