Pull requests trigger push workflow

If you are only deploying certain branches, limit the Push workflow the following way:

name: Push workflow
on:
  push:
    branches:
    - master

Another option is to exclude branches

on:
  push:
    # Sequence of patterns matched against refs/heads
    branches-ignore:
      # Push events to branches matching refs/heads/mona/octocat
      - 'mona/octocat'
      # Push events to branches matching refs/heads/releases/beta/3-alpha
      - 'releases/**-alpha'

See https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions#onpushpull_requestbranchestags for more examples

You can use these lines in your job to avoid internal pull requests (which also triggering push) to trigger your workflow, while allowing external pull requests to trigger your workflow.

    # a push event from the origin repo, or a PR from external repo
    if: ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name != 'your/full_repo_name' }}

Note though, due to security design reason, the external pull request will only trigger workflow that's defined in the default branch of the upstream repository.

Reference:

• github pull_request event payload: https://docs.github.com/en/developers/webhooks-and-events/webhook-events-and-payloads#pull_request

For that, you might need to define the type of trigger in PR as well.

example code:

on:
  pull_request:
    types:
      - closed
    branches:
      - master

I hope this helps.