It's surprising to me that opening a PR could clobber an image and break CI in an external repository.