pull_request_target runs from the target branch, not the default branch (cherry picked from commit bf9e19cc21dbc5cd0148e094f8c64d24ce0fac75)
Use the oci:ci image to get jq (cherry picked from commit ebfe702df65f674d45ce7ce7aa46c91a1cf67f1d)
(cherry picked from commit 1f18d8d67798d990bc2d4da5c123cba9f4dc866f)