diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 36c2805b..e8bf243a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -93,12 +93,11 @@ jobs:
 
   publish:
     if: |
-      github.event.pull_request.head.repo.full_name == github.repository &&
       github.repository == 'qdm12/gluetun' &&
       (
         github.event_name == 'push' ||
         github.event_name == 'release' ||
-        (github.event_name == 'pull_request' && github.actor != 'dependabot[bot]')
+        (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]')
       )
     needs: [verify, codeql]
     permissions: