diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yml
index 521487f5..96c23e5d 100644
--- a/.github/workflows/coverity-scan.yml
+++ b/.github/workflows/coverity-scan.yml
@@ -2,13 +2,15 @@
 name: Coverity Scan
 
 on:
-  push:
-    branches: ["main"]
+  pull_request_target:
+    types:
+      - labeled
   schedule:
     - cron: '41 3 * * 0'
 
 jobs:
   coverity:
+    if: github.event.label.name == 'covscan'
     name: Coverity Scan
     runs-on: ubuntu-22.04
     container: fedora:latest