diff --git a/.github/workflows/differential-shellcheck.yml b/.github/workflows/differential-shellcheck.yml
index 5937d67022..64999e60a4 100644
--- a/.github/workflows/differential-shellcheck.yml
+++ b/.github/workflows/differential-shellcheck.yml
@@ -15,7 +15,9 @@ permissions:
 
 jobs:
   lint:
-    if: github.event.repository.name != 'systemd-security'
+    if: >
+      github.event.repository.name != 'systemd-security' &&
+      (github.event_name != 'push' || github.repository == 'systemd/systemd')
     runs-on: ubuntu-24.04
 
     permissions:
diff --git a/.github/workflows/mkosi.yml b/.github/workflows/mkosi.yml
index 27bb8c870d..37bdb698c5 100644
--- a/.github/workflows/mkosi.yml
+++ b/.github/workflows/mkosi.yml
@@ -46,6 +46,8 @@ permissions:
 
 jobs:
   ci:
+    # Don't run on pushes to forks, only on pushes to the upstream repositories
+    if: github.event_name != 'push' || github.repository == 'systemd/systemd' || github.repository == 'systemd/systemd-stable'
     runs-on: ${{ matrix.runner || 'ubuntu-24.04' }}
     concurrency:
       group: ${{ github.workflow }}-${{ matrix.distro }}-${{ matrix.release }}-${{ github.ref }}-${{ matrix.runner || 'ubuntu-24.04' }}