diff --git a/.github/workflows/label-pullrequest.yml b/.github/workflows/label-pullrequest.yml
index 62f5f909..5f9c071b 100644
--- a/.github/workflows/label-pullrequest.yml
+++ b/.github/workflows/label-pullrequest.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   label-pullrequest:
-    if: (github.event_name != 'pull_request' && ! github.event.pull_request.head.repo.fork) || (github.event_name == 'pull_request' && (github.event.pull_request.head.repo.fork || startsWith(github.head_ref, 'dependabot/')))
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c4ae99b6..44b35a9f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -25,7 +25,7 @@ permissions:
 
 jobs:
   changes:
-    if: (github.event_name != 'pull_request' && ! github.event.pull_request.head.repo.fork) || (github.event_name == 'pull_request' && (github.event.pull_request.head.repo.fork || startsWith(github.head_ref, 'dependabot/')))
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
     name: check files
     runs-on: ubuntu-latest
     timeout-minutes: 3
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index fc4f90ec..97970f81 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -25,7 +25,7 @@ permissions:
 
 jobs:
   changes:
-    if: (github.event_name != 'pull_request' && ! github.event.pull_request.head.repo.fork) || (github.event_name == 'pull_request' && (github.event.pull_request.head.repo.fork || startsWith(github.head_ref, 'dependabot/')))
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
     name: check files
     runs-on: ubuntu-latest
     timeout-minutes: 3