diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c7bdda7f..715d22d4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -331,9 +331,9 @@ jobs:
 
   scout:
     runs-on: ubuntu-24.04
-    if: ${{ github.ref == 'refs/heads/master' }}
+    if: ${{ github.ref == 'refs/heads/master' && github.repository == 'docker/buildx' }}
     permissions:
-      # required to wirte sarif report
+      # required to write sarif report
       security-events: write
     needs:
       - bin-image