diff --git a/.github/workflows/license-headers.yml b/.github/workflows/license-headers.yml
index ac8a89e823d8..43c5de54101b 100644
--- a/.github/workflows/license-headers.yml
+++ b/.github/workflows/license-headers.yml
@@ -3,14 +3,27 @@
 
 ---
 name: '[License] Check license headers'
-
 on:
-  pull_request:
-
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
+    branches:
+      - main
+      - bitnami:main
+# Remove all permissions by default
+permissions: {}
 jobs:
   license-headers-linter:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@v3
+        name: Checkout Repository
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
       - name: Check license Headers
-        uses: apache/skywalking-eyes/header@v0.4.0
+        uses: apache/skywalking-eyes/header@v0.4.0
\ No newline at end of file