diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e4981092..715d22d4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -331,13 +331,16 @@ jobs:
 
   scout:
     runs-on: ubuntu-24.04
-    if: ${{ github.ref == 'refs/heads/master' }}
+    if: ${{ github.ref == 'refs/heads/master' && github.repository == 'docker/buildx' }}
     permissions:
-      # required to wirte sarif report
+      # required to write sarif report
       security-events: write
     needs:
       - bin-image
     steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
       -
         name: Login to DockerHub
         uses: docker/login-action@v3