diff --git a/.github/workflows/macos-generation.yml b/.github/workflows/macos-generation.yml
index e91f4470c..156df7064 100644
--- a/.github/workflows/macos-generation.yml
+++ b/.github/workflows/macos-generation.yml
@@ -40,7 +40,12 @@ defaults:
 
 jobs:
   build:
+    #
+    # "macos-vmware" is dedicated runner not available in forks.
+    # to reduce undesired run attempts in forks, stick jobs to "actions" organization only
+    #
     runs-on: macos-vmware
+    if: ${{ github.repository_owner == 'actions' }}
     timeout-minutes: 1200
     steps:
     - uses: azure/login@v1
diff --git a/.github/workflows/ubuntu-win-generation.yml b/.github/workflows/ubuntu-win-generation.yml
index 9acf66438..48dea710e 100644
--- a/.github/workflows/ubuntu-win-generation.yml
+++ b/.github/workflows/ubuntu-win-generation.yml
@@ -24,7 +24,12 @@ defaults:
 
 jobs:
   build:
+    #
+    # "azure-builds" is dedicated runner not available in forks.
+    # to reduce undesired run attempts in forks, stick jobs to "actions" organization only
+    #
     runs-on: azure-builds
+    if: ${{ github.repository_owner == 'actions' }}
     timeout-minutes: 1200
     steps:
       - name: Determine checkout type