diff --git a/.github/workflows/publish-docker.yml b/.github/workflows/publish-docker.yml
index 2689071a..89dedae5 100644
--- a/.github/workflows/publish-docker.yml
+++ b/.github/workflows/publish-docker.yml
@@ -12,7 +12,7 @@ on:
     paths-ignore:
       - 'docs/**'
       - '**/*.md'
-  pull_request_target:
+  pull_request:
     types:
       - labeled
     paths-ignore:
diff --git a/Dockerfile b/Dockerfile
index 64043491..79292259 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,9 +10,7 @@ COPY hack hack
 
 # cache deps before building and copying source so that we don't need to re-download as much
 # and so that source changes don't invalidate our downloaded layer
-RUN --mount=type=cache,target=/root/.cache/go-build \
-    --mount=type=cache,target=/go/pkg \
-    && go mod download
+RUN go mod download
 
 # Copy the go source
 COPY api/ api/