diff --git a/.github/workflows/ctt-bot.yml b/.github/workflows/ctt-bot.yml
index 5d3dc721c..5e7bdecdb 100644
--- a/.github/workflows/ctt-bot.yml
+++ b/.github/workflows/ctt-bot.yml
@@ -1,6 +1,6 @@
 name: OCF Conformance Bot
 on:
-  pull_request:
+  pull_request_target:
     types:
       - synchronize
       - opened
diff --git a/.github/workflows/sonar-cloud-analysis.yml b/.github/workflows/sonar-cloud-analysis.yml
index 108a1598b..aa9a30ac3 100644
--- a/.github/workflows/sonar-cloud-analysis.yml
+++ b/.github/workflows/sonar-cloud-analysis.yml
@@ -84,6 +84,8 @@ jobs:
       hub_args: ${{ matrix.hub_args }}
 
   sonar-cloud-scan:
+    # don't run for forks
+    if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)
     name: Sonar Cloud scan
     runs-on: ubuntu-22.04
     env: