diff --git a/.forgejo/workflows/jekyll.yaml b/.forgejo/workflows/jekyll.yaml
index 9ec32f6..8868c20 100644
--- a/.forgejo/workflows/jekyll.yaml
+++ b/.forgejo/workflows/jekyll.yaml
@@ -56,6 +56,7 @@ jobs:
           jekyll build --verbose
       - name: Deploy Jekyll site
         id: deploy_site
+        if: forge.repository == 'Tahoe-LAFS/web-landing-page'
         run: |
           if [ "${{ forge.ref }}" = 'refs/heads/main' ]; then
             WEB_ROOT="${WEB_DIR}/live"
@@ -79,7 +80,7 @@ jobs:
             ./_site/ "${WEB_USER}@${WEB_HOST}:${WEB_ROOT}${WEB_CONTEXT}"
       - name: Comment pull request
         id: comment_pull_request
-        if: ${{ always() && forge.event_name == 'pull_request' }}
+        if: ${{ always() && forge.event_name == 'pull_request' && forge.repository == 'Tahoe-LAFS/web-landing-page' }}
         uses: https://github.com/exercism/pr-commenter-action@v1.5.1
         with:
           template-variables: |
diff --git a/.forgejo/workflows/jekyll_cleanup.yml b/.forgejo/workflows/jekyll_cleanup.yml
index f3422e9..2d35876 100644
--- a/.forgejo/workflows/jekyll_cleanup.yml
+++ b/.forgejo/workflows/jekyll_cleanup.yml
@@ -12,6 +12,7 @@ env:
   WEB_CONTEXT: "/${{ forge.event.pull_request.number }}/"
 jobs:
   jekyll_cleanup:
+    if: forge.repository == 'Tahoe-LAFS/web-landing-page'
     runs-on: ubuntu-22.04
     permissions:
       pull-requests: read
diff --git a/README.md b/README.md
index 1e2f062..b16b693 100644
--- a/README.md
+++ b/README.md
@@ -21,3 +21,4 @@ docker-compose up
 
 We welcome contributions!  Easiest is to open tickets or pull requests directly.  If unsure, join the IRC or ask on the Tahoe-LAFS developer mailing list.
 
+**Caveat**: because they need access to the repository secrets (e.g. SSH private key), the deployment step will be skipped on forked repositories. Which means preview sites will only be published from local branches pushed by collaborators with permissions to write in this repository.