diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index b9784c3cc73da1c2f3bf026379495c2028e48c58..f56c7e2b25943c3bf76e43b86a7dbd11fe1dd649 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -277,6 +277,8 @@ respdiff:iter:tls:linux:amd64:
 distro:fedora-27:
   stage: test
   image: $CI_REGISTRY/knot/knot-resolver/ci:fedora-27
+  only:
+    - branches@knot/knot-resolver  # do not trigger job for forks (no privileged runners)
   dependencies:
     - srpm
   script:
@@ -294,6 +296,8 @@ distro:fedora-27:
 distro:epel-7:
   stage: test
   image: $CI_REGISTRY/knot/knot-resolver/ci:fedora-27
+  only:
+    - branches@knot/knot-resolver  # do not trigger job for forks (no privileged runners)
   dependencies:
     - srpm
   script: