fixup! Try to run Coverity Scan on demand

.github/workflows/coverity-scan.yml

@@ -2,15 +2,16 @@
 name: Coverity Scan
 
 on:
-  pull_request_target:
+  workflow_run:
+    workflows: [Labeled]
     types:
-      - labeled
+      - completed
   schedule:
     - cron: '41 3 * * 0'
 
 jobs:
   coverity:
-    if: github.event.label.name == 'covscan'
+    if: ${{ contains(github.event.*.labels.*.name, 'covscan') || github.event_name == 'schedule' }}
     name: Coverity Scan
     runs-on: ubuntu-22.04
     container: fedora:latest

.github/workflows/labeled.yml

@@ -0,0 +1,15 @@
+---
+name: Labeled
+
+on:
+  pull_request:
+    types:
+      - labeled
+
+jobs:
+  labeled:
+    if: ${{ github.event.label.name == 'covscan' }}
+    name: Label checks
+    runs-on: ubuntu-latest
+    steps:
+      - run: env