diff --git a/.github/in-cluster-test-scripts/aks.sh b/.github/in-cluster-test-scripts/aks.sh
index 1e8dd0db5f..7f6ea9cc77 100644
--- a/.github/in-cluster-test-scripts/aks.sh
+++ b/.github/in-cluster-test-scripts/aks.sh
@@ -16,7 +16,7 @@ sleep 10s
 [[ $(pgrep -f "cilium.*hubble.*port-forward|kubectl.*port-forward.*hubble-relay" | wc -l) == 2 ]]
 
 # Run connectivity test
-cilium connectivity test --debug --all-flows --collect-sysdump-on-failure --external-target bing.com.
+cilium connectivity test --test-concurrency=5 --debug --all-flows --collect-sysdump-on-failure --external-target bing.com.
 
 # Run performance test
 cilium connectivity perf --duration 1s
diff --git a/.github/in-cluster-test-scripts/eks-tunnel.sh b/.github/in-cluster-test-scripts/eks-tunnel.sh
index 9dded9c0ed..c16bda3c5e 100644
--- a/.github/in-cluster-test-scripts/eks-tunnel.sh
+++ b/.github/in-cluster-test-scripts/eks-tunnel.sh
@@ -30,7 +30,7 @@ sleep 10s
 [[ $(pgrep -f "cilium.*hubble.*port-forward|kubectl.*port-forward.*hubble-relay" | wc -l) == 2 ]]
 
 # Run connectivity test
-cilium connectivity test --debug --all-flows --collect-sysdump-on-failure --external-target amazon.com. \
+cilium connectivity test --test-concurrency=5 --debug --all-flows --collect-sysdump-on-failure --external-target amazon.com. \
   --test '!dns-only,!to-fqdns,!client-egress-l7,!health'
   # workaround for nslookup issues in tunnel mode causing tests to fail reliably
   # TODO: remove once:
diff --git a/.github/in-cluster-test-scripts/eks.sh b/.github/in-cluster-test-scripts/eks.sh
index f6034eba67..1eaf7d50b1 100644
--- a/.github/in-cluster-test-scripts/eks.sh
+++ b/.github/in-cluster-test-scripts/eks.sh
@@ -28,7 +28,7 @@ sleep 10s
 [[ $(pgrep -f "cilium.*hubble.*port-forward|kubectl.*port-forward.*hubble-relay" | wc -l) == 2 ]]
 
 # Run connectivity test
-cilium connectivity test --debug --all-flows --collect-sysdump-on-failure --external-target amazon.com.
+cilium connectivity test --test-concurrency=5 --debug --all-flows --collect-sysdump-on-failure --external-target amazon.com.
 
 # Run performance test
 cilium connectivity perf --duration 1s
diff --git a/.github/in-cluster-test-scripts/external-workloads.sh b/.github/in-cluster-test-scripts/external-workloads.sh
index 1a619eb9ac..27d8309db1 100644
--- a/.github/in-cluster-test-scripts/external-workloads.sh
+++ b/.github/in-cluster-test-scripts/external-workloads.sh
@@ -4,7 +4,7 @@ set -x
 set -e
 
 # Run connectivity test
-cilium connectivity test --debug --all-flows --collect-sysdump-on-failure --external-target google.com.
+cilium connectivity test --test-concurrency=5 --debug --all-flows --collect-sysdump-on-failure --external-target google.com.
 
 # Run performance test
 cilium connectivity perf --duration 1s
diff --git a/.github/in-cluster-test-scripts/multicluster.sh b/.github/in-cluster-test-scripts/multicluster.sh
index 1613ddb676..e48ffd25a9 100644
--- a/.github/in-cluster-test-scripts/multicluster.sh
+++ b/.github/in-cluster-test-scripts/multicluster.sh
@@ -73,5 +73,5 @@ sleep 10s
 [[ $(pgrep -f "cilium.*hubble.*port-forward|kubectl.*port-forward.*hubble-relay" | wc -l) == 2 ]]
 
 # Run connectivity test
-cilium --context "${CONTEXT1}" connectivity test --debug --multi-cluster "${CONTEXT2}" --test '!/*-deny,!/pod-to-.*-nodeport' \
+cilium --context "${CONTEXT1}" connectivity test --test-concurrency=5 --debug --multi-cluster "${CONTEXT2}" --test '!/*-deny,!/pod-to-.*-nodeport' \
   --all-flows --collect-sysdump-on-failure --external-target google.com.
diff --git a/.github/workflows/aks-byocni.yaml b/.github/workflows/aks-byocni.yaml
index 1ea3db2106..53d1561c17 100644
--- a/.github/workflows/aks-byocni.yaml
+++ b/.github/workflows/aks-byocni.yaml
@@ -14,9 +14,9 @@ on:
   #   will disappear from the PR checks: please provide a direct link to the
   #   successful workflow run (can be found from Actions tab) in a comment.
   #
-  # pull_request: {}
+  pull_request: {}
   ###
-  pull_request_target: {}
+  # pull_request_target: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 0/6 * * *'
@@ -156,7 +156,7 @@ jobs:
           [[ $(pgrep -f "kubectl.*port-forward.*hubble-relay" | wc -l) == 1 ]]
 
           # Run connectivity test
-          cilium connectivity test --all-flows --collect-sysdump-on-failure --external-target bing.com.
+          cilium connectivity test --test-concurrency=5 --all-flows --collect-sysdump-on-failure --external-target bing.com.
 
           # Run performance test
           cilium connectivity perf --duration 1s
diff --git a/.github/workflows/eks-tunnel.yaml b/.github/workflows/eks-tunnel.yaml
index 47285f6b9d..33514e68a4 100644
--- a/.github/workflows/eks-tunnel.yaml
+++ b/.github/workflows/eks-tunnel.yaml
@@ -14,9 +14,9 @@ on:
   #   will disappear from the PR checks: please provide a direct link to the
   #   successful workflow run (can be found from Actions tab) in a comment.
   #
-  # pull_request: {}
+  pull_request: {}
   ###
-  pull_request_target: {}
+  # pull_request_target: {}
   # Run every 6 hours
   schedule:
     - cron:  '30 1/6 * * *'
diff --git a/.github/workflows/eks.yaml b/.github/workflows/eks.yaml
index 90b97d0f91..39584c2698 100644
--- a/.github/workflows/eks.yaml
+++ b/.github/workflows/eks.yaml
@@ -14,9 +14,9 @@ on:
   #   will disappear from the PR checks: please provide a direct link to the
   #   successful workflow run (can be found from Actions tab) in a comment.
   #
-  # pull_request: {}
+  pull_request: {}
   ###
-  pull_request_target: {}
+  # pull_request_target: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 1/6 * * *'
diff --git a/.github/workflows/externalworkloads.yaml b/.github/workflows/externalworkloads.yaml
index d0856a6fc8..9784a3af5e 100644
--- a/.github/workflows/externalworkloads.yaml
+++ b/.github/workflows/externalworkloads.yaml
@@ -14,9 +14,9 @@ on:
   #   will disappear from the PR checks: please provide a direct link to the
   #   successful workflow run (can be found from Actions tab) in a comment.
   #
-  # pull_request: {}
+  pull_request: {}
   ###
-  pull_request_target: {}
+  # pull_request_target: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 4/6 * * *'
diff --git a/.github/workflows/multicluster.yaml b/.github/workflows/multicluster.yaml
index a6f405aa95..c0dd29757c 100644
--- a/.github/workflows/multicluster.yaml
+++ b/.github/workflows/multicluster.yaml
@@ -14,9 +14,9 @@ on:
   #   will disappear from the PR checks: please provide a direct link to the
   #   successful workflow run (can be found from Actions tab) in a comment.
   #
-  # pull_request: {}
+  pull_request: {}
   ###
-  pull_request_target: {}
+  # pull_request_target: {}
   # Run every 6 hours
   schedule:
     - cron:  '0 3/6 * * *'