diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 53df4bbc..ee9b2846 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -1,6 +1,7 @@
 name: Lint
 
-on: push
+# pull_request covers fork PRs too; merges to master are checked by deploy.yml.
+on: pull_request
 
 # Actions pinned to full commit SHAs: tags are mutable and can be moved
 # after a compromise. Bump SHA + version comment together.