diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5cad052..3e00d36 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,6 +15,12 @@ jobs:
       - run: npm ci
       - run: npm test
   test-with-output-secrets:
+    if: |
+      github.ref == 'refs/heads/main' ||
+      (
+        github.event_name == 'pull_request' && 
+        github.event.pull_request.head.repo.full_name == github.repository
+      )
     uses: ./.github/workflows/acceptance-test.yml
     secrets: inherit
     with:
@@ -23,6 +29,12 @@ jobs:
       multiline-secret: op://acceptance-tests/multiline-secret/notesPlain
       export-env: false
   test-with-export-env:
+    if: |
+      github.ref == 'refs/heads/main' ||
+      (
+        github.event_name == 'pull_request' && 
+        github.event.pull_request.head.repo.full_name == github.repository
+      )
     uses: ./.github/workflows/acceptance-test.yml
     secrets: inherit
     with:
@@ -31,6 +43,12 @@ jobs:
       multiline-secret: op://acceptance-tests/multiline-secret/notesPlain
       export-env: true
   test-references-with-ids:
+    if: |
+      github.ref == 'refs/heads/main' ||
+      (
+        github.event_name == 'pull_request' && 
+        github.event.pull_request.head.repo.full_name == github.repository
+      )
     uses: ./.github/workflows/acceptance-test.yml
     secrets: inherit
     with: