diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ccc1e085..33e4ae5f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -61,6 +61,7 @@ jobs:
       run: ./gradlew build
 
     - name: Ensure sigstore-java self signing still works
+      if: ${{ !github.event.pull_request.head.repo.fork }}
       run: ./gradlew sigstore-java:publishToMavenLocal -Prelease -PskipPgpSigning
 
     - name: Test sigstore-java/sandbox