diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fc2381c..610716b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -55,8 +55,11 @@ jobs:
       - run: python tools/security_guards.py
 
   dependency-review:
-    name: Dependency review
-    if: github.event_name == 'pull_request'
+    name: Dependency review (upstream PRs only)
+    # Requires the repo's Dependency graph (enabled by default on public
+    # repos, but NOT on forks) - so this runs only on PRs to the upstream
+    # repo, same pattern as the other upstream-only jobs.
+    if: github.event_name == 'pull_request' && github.repository == 'MadsLorentzen/ai-job-search'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4