How can I prevent PRs from changing my CI configuration?

Question

We have an open source project in GitHub. And we use Azure DevOps pipelines for our CI.

We publish our artefacts to S3 and Maven after successful tests, so all the creden