diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 037f8a23..43dd03cc 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -45,6 +45,11 @@ jobs:
           CGO_ENABLED=0 GOOS=openbsd go build
   integration:
     runs-on: [self-hosted, linux, x64]
+    # run integration tests on all builds except pull requests from forks or
+    # dependabot
+    if: |
+      github.event_name != 'pull_request' ||
+      (github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]')
     name: "integration tests (linux)"
     permissions:
       contents: 'read'