diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b2884ed1a..54ca5cca6 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,5 +11,8 @@ jobs:
     - uses: actions/checkout@v2
     - name: abaplint
       uses: abaplint/actions-abaplint@master
+      # GITHUB_TOKEN in forked repositories is read-only
+      # https://help.github.com/en/actions/reference/events-that-trigger-workflows#pull-request-event-pull_request
+      if: ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository }}       
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}