diff --git a/.github/workflows/buildkit.yml b/.github/workflows/buildkit.yml
index a77eef798ea0..0799235163a3 100644
--- a/.github/workflows/buildkit.yml
+++ b/.github/workflows/buildkit.yml
@@ -57,6 +57,9 @@ jobs:
               PUSH=push
             fi
           fi
+          if [ "$GITHUB_REPOSITORY" != "moby/buildkit" ]; then
+            PUSH=false
+          fi
           echo "tag=${TAG}" >>${GITHUB_OUTPUT}
           echo "push=${PUSH}" >>${GITHUB_OUTPUT}
           platforms=$(docker buildx bake release --print | jq -cr '.target."release".platforms')
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index b6d192b08bb7..4da87a1856ab 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -61,6 +61,9 @@ jobs:
               PUSH=push
             fi
           fi
+          if [ "$GITHUB_REPOSITORY" != "moby/buildkit" ]; then
+            PUSH=false
+          fi
           echo "typ=${TYP}" >>${GITHUB_OUTPUT}
           echo "push=${PUSH}" >>${GITHUB_OUTPUT}
           echo "tag=${TAG}" >>${GITHUB_OUTPUT}
diff --git a/hack/util b/hack/util
index 2c917d60405a..14ccc624abb5 100755
--- a/hack/util
+++ b/hack/util
@@ -39,7 +39,7 @@ currentref=""
 currentcontext="."
 cacheFromFlags=""
 cacheToFlags=""
-if [ "$GITHUB_ACTIONS" = "true" ]; then
+if [ "$GITHUB_ACTIONS" = "true" ] && [ "$GITHUB_REPOSITORY" = "moby/buildkit" ]; then
   currentref="https://github.com/$GITHUB_REPOSITORY.git#$GITHUB_REF"
   if [ -n "$CACHE_FROM" ]; then
     for cfrom in $CACHE_FROM; do