diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 689fe71fddc..04ad7fae711 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -11,6 +11,7 @@ concurrency:
 jobs:
   analyze:
     name: Analyze
+    if: github.event_name == 'pull_request' || github.repository != 'openzfs/zfs'
     runs-on: ubuntu-22.04
     permissions:
       actions: read
diff --git a/.github/workflows/smatch.yml b/.github/workflows/smatch.yml
index 305a1f0179b..ffad83b64ea 100644
--- a/.github/workflows/smatch.yml
+++ b/.github/workflows/smatch.yml
@@ -10,6 +10,7 @@ concurrency:
 
 jobs:
   smatch:
+    if: github.event_name == 'pull_request' || github.repository != 'openzfs/zfs'
     runs-on: ubuntu-24.04
     steps:
     - name: Checkout smatch
diff --git a/.github/workflows/zfs-arm.yml b/.github/workflows/zfs-arm.yml
index b6d6444c2dd..fb91f198f6d 100644
--- a/.github/workflows/zfs-arm.yml
+++ b/.github/workflows/zfs-arm.yml
@@ -14,6 +14,7 @@ on:
 jobs:
   zfs-arm:
     name: ZFS ARM build
+    if: github.event_name == 'pull_request' || github.repository != 'openzfs/zfs'
     runs-on: ubuntu-24.04-arm
     steps:
     - uses: actions/checkout@v6
diff --git a/.github/workflows/zfs-qemu.yml b/.github/workflows/zfs-qemu.yml
index 9f251beac9e..64ffee484a5 100644
--- a/.github/workflows/zfs-qemu.yml
+++ b/.github/workflows/zfs-qemu.yml
@@ -23,6 +23,7 @@ concurrency:
 jobs:
   test-config:
     name: Setup
+    if: github.event_name == 'pull_request' || github.repository != 'openzfs/zfs'
     runs-on: ubuntu-24.04
     outputs:
       test_os: ${{ steps.os.outputs.os }}
@@ -94,7 +95,10 @@ jobs:
   qemu-vm:
     name: qemu-x86
     needs: [ test-config ]
-    if: needs.test-config.outputs.ci_type != 'docs'
+    if: >-
+      (github.event_name == 'pull_request' ||
+      github.repository != 'openzfs/zfs') &&
+      needs.test-config.outputs.ci_type != 'docs'
     strategy:
       fail-fast: false
       matrix:
@@ -157,7 +161,10 @@ jobs:
       run: .github/workflows/scripts/qemu-8-summary.sh '${{ steps.artifact-upload.outputs.artifact-url }}'
 
   cleanup:
-    if: always()
+    if: >-
+      (github.event_name == 'pull_request' ||
+      github.repository != 'openzfs/zfs') &&
+      always()
     name: Cleanup
     runs-on: ubuntu-latest
     needs: [ qemu-vm ]