diff --git a/.github/workflows/opentofu.yml b/.github/workflows/opentofu.yml
index ac978a0..d841d7b 100644
--- a/.github/workflows/opentofu.yml
+++ b/.github/workflows/opentofu.yml
@@ -15,6 +15,9 @@ permissions:
 
 jobs:
   opentofu:
+    if: >-
+      github.event_name != 'pull_request' ||
+      github.event.pull_request.head.repo.full_name == github.repository
     uses: makeitworkcloud/shared-workflows/.github/workflows/opentofu.yml@main
     with:
       gcp-workload-identity-provider: projects/920734942788/locations/global/workloadIdentityPools/github/providers/github