Test fixing Covscan PR target

Signed-off-by: Simo Sorce <[email protected]>

.github/workflows/coverity-scan.yml

@@ -2,7 +2,7 @@
 name: Coverity Scan
 
 on:
-  pull_request_target:
+  pull_request:
     branches: ["main"]
     types:
       - labeled
@@ -60,8 +60,9 @@ jobs:
                 nss-softokn nss-tools nss-softokn-devel \
                 gh
       - name: Find PR
-        uses: suzuki-shunsuke/[email protected]
-        id: pr
+        run: |
+          echo "Base ${{ github.event.pull_request.base.ref }} - ${{ github.event.pull_request.base.sha }}"
+          echo "Head ${{ github.event.pull_request.head.ref }} - ${{ github.event.pull_request.head.sha }}"
       - name: Checkout Repository
         uses: actions/checkout@v4
         with:
@@ -84,3 +85,11 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GH_REPO: ${{ github.repository }}
           NUMBER: ${{ github.event.number }}
+
+  on-no-covscan-labeled-pr:
+    if: ${{ contains(github.event.*.labels.*.name, 'no-covscan') }}
+    name: Coverity Scan on PR
+    runs-on: ubuntu-latest
+    steps:
+      - name: All covered
+        run: echo "Dummy action to report all ok and mark covscan as handled"