diff --git a/.github/workflows/cve_checks.yml b/.github/workflows/cve_checks.yml
index 4b49300fc..3393d4f9e 100644
--- a/.github/workflows/cve_checks.yml
+++ b/.github/workflows/cve_checks.yml
@@ -1,6 +1,6 @@
 name: "Infra: CVE checks"
 on:
-  pull_request_target:
+  pull_request:
   push:
     branches: [ "main" ]
   workflow_dispatch:
@@ -74,7 +74,7 @@ jobs:
 
   notify:
     needs: check-cves
-    if: ${{ always() && needs.build-and-test.result == 'failure' }}
+    if: ${{ always() && needs.build-and-test.result == 'failure' && github.event_name == 'schedule' }}
     uses: ./.github/workflows/infra_discord_hook.yml
     with:
       message: "Attention! CVE checks run failed! Please fix them CVEs :("
diff --git a/frontend/npm b/frontend/npm
new file mode 100644
index 000000000..e69de29bb