diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f1da35bc7c..fd732598d9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -71,7 +71,8 @@ jobs:
     - name: Report core project coverage with Codecov
       if: >-
         github.event_name != 'schedule' &&
-        matrix.os == 'ubuntu-latest'
+        matrix.os == 'ubuntu-latest' &&
+        github.repository == 'scikit-hep/pyhf'
       uses: codecov/codecov-action@v5
       with:
         fail_ci_if_error: true
@@ -89,7 +90,7 @@ jobs:
         coverage xml
 
     - name: Report contrib coverage with Codecov
-      if: github.event_name != 'schedule' && matrix.python-version == '3.13' && matrix.os == 'ubuntu-latest'
+      if: github.event_name != 'schedule' && matrix.python-version == '3.13' && matrix.os == 'ubuntu-latest' && github.repository == 'scikit-hep/pyhf'
       uses: codecov/codecov-action@v5
       with:
         fail_ci_if_error: true
@@ -109,7 +110,7 @@ jobs:
         coverage xml --data-file=.coverage-doctest -o doctest-coverage.xml
 
     - name: Report doctest coverage with Codecov
-      if: github.event_name != 'schedule' && matrix.python-version == '3.13' && matrix.os == 'ubuntu-latest'
+      if: github.event_name != 'schedule' && matrix.python-version == '3.13' && matrix.os == 'ubuntu-latest' && github.repository == 'scikit-hep/pyhf'
       uses: codecov/codecov-action@v5
       with:
         fail_ci_if_error: true
diff --git a/.github/workflows/dependencies-head.yml b/.github/workflows/dependencies-head.yml
index 86ed925ec7..17b0d23d4a 100644
--- a/.github/workflows/dependencies-head.yml
+++ b/.github/workflows/dependencies-head.yml
@@ -16,6 +16,7 @@ permissions:
 jobs:
   release-candidates:
 
+    if: github.repository == 'scikit-hep/pyhf'
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -46,6 +47,7 @@ jobs:
 
   scipy:
 
+    if: github.repository == 'scikit-hep/pyhf'
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -75,6 +77,7 @@ jobs:
 
   iminuit:
 
+    if: github.repository == 'scikit-hep/pyhf'
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -101,6 +104,7 @@ jobs:
 
   uproot5:
 
+    if: github.repository == 'scikit-hep/pyhf'
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -126,6 +130,7 @@ jobs:
 
   matplotlib:
 
+    if: github.repository == 'scikit-hep/pyhf'
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
@@ -164,6 +169,7 @@ jobs:
 
   pytest:
 
+    if: github.repository == 'scikit-hep/pyhf'
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 82674e9a8d..019ec86b19 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -65,14 +65,14 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Login to DockerHub
-        if: github.event_name != 'pull_request'
+        if: github.event_name != 'pull_request' && github.repository == 'scikit-hep/pyhf'
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to GitHub Container Registry
-        if: github.event_name != 'pull_request'
+        if: github.event_name != 'pull_request' && github.repository == 'scikit-hep/pyhf'
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index a53dc4cc0b..8d09ad41e7 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -100,7 +100,7 @@ jobs:
 
   deploy:
     name: Deploy docs to GitHub Pages
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main' && github.repository == 'scikit-hep/pyhf'
     needs: build
     # Set permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
     permissions:
diff --git a/.github/workflows/release_tests.yml b/.github/workflows/release_tests.yml
index 01ba1da5d1..10531df951 100644
--- a/.github/workflows/release_tests.yml
+++ b/.github/workflows/release_tests.yml
@@ -17,6 +17,7 @@ jobs:
 
   pypi_release:
 
+    if: github.repository == 'scikit-hep/pyhf'
     runs-on: ${{ matrix.os }}
     strategy:
       matrix: