diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b08f7a1ea..451fdabe5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -141,6 +141,7 @@ jobs:
 
     - name: 🗝️ Generate build provenance attestations
       uses: actions/attest-build-provenance@v2
+      if: github.event.pull_request.head.repo.full_name == github.repository
       with:
         subject-path: |
           imhex-*.msi
@@ -385,6 +386,7 @@ jobs:
 
     - name: 🗝️ Generate build provenance attestations
       uses: actions/attest-build-provenance@v2
+      if: github.event.pull_request.head.repo.full_name == github.repository
       with:
         subject-path: |
           ./*.dmg
@@ -504,6 +506,7 @@ jobs:
 
       - name: 🗝️ Generate build provenance attestations
         uses: actions/attest-build-provenance@v2
+        if: github.event.pull_request.head.repo.full_name == github.repository
         with:
           subject-path: |
             ./*.dmg
@@ -597,6 +600,7 @@ jobs:
 
       - name: 🗝️ Generate build provenance attestations
         uses: actions/attest-build-provenance@v2
+        if: github.event.pull_request.head.repo.full_name == github.repository
         with:
           subject-path: |
             ./*.deb
@@ -658,6 +662,7 @@ jobs:
 
       - name: 🗝️ Generate build provenance attestations
         uses: actions/attest-build-provenance@v2
+        if: github.event.pull_request.head.repo.full_name == github.repository
         with:
           subject-path: |
             out/*.AppImage
@@ -774,6 +779,7 @@ jobs:
 
       - name: 🗝️ Generate build provenance attestations
         uses: actions/attest-build-provenance@v2
+        if: github.event.pull_request.head.repo.full_name == github.repository
         with:
           subject-path: |
             build/imhex-${{ env.IMHEX_VERSION }}-ArchLinux-x86_64.pkg.tar.zst
@@ -917,6 +923,7 @@ jobs:
 
       - name: 🗝️ Generate build provenance attestations
         uses: actions/attest-build-provenance@v2
+        if: github.event.pull_request.head.repo.full_name == github.repository
         with:
           subject-path: |
             imhex-${{ env.IMHEX_VERSION }}-${{ matrix.name }}-${{ matrix.release_num }}-x86_64.rpm