diff --git a/.github/workflows/welcome-first-time-contrib.yml b/.github/workflows/welcome-first-time-contrib.yml
index 57c5f00e..12983077 100644
--- a/.github/workflows/welcome-first-time-contrib.yml
+++ b/.github/workflows/welcome-first-time-contrib.yml
@@ -4,9 +4,9 @@
 name: Welcome first time contributors
 
 on:
-  pull_request:
-    types: 
-      - opened
+  pull_request_target:      # Needed to write welcome comments on fork PRs; script only uses the GitHub API.
+    types:
+      - opened              # zizmor: ignore[dangerous-triggers]
   issues:
     types:
       - opened
@@ -18,7 +18,7 @@ permissions:
 jobs:
   welcome:
     name: Post welcome message
-    if: ${{ !contains(fromJson('["asyncapi-bot", "dependabot[bot]", "dependabot-preview[bot]", "allcontributors[bot]"]'), github.actor) }} # zizmor: ignore[obfuscation]
+    if: ${{ !contains(fromJson('["asyncapi-bot", "dependabot[bot]", "dependabot-preview[bot]", "allcontributors[bot]"]'), github.event.issue.user.login || github.event.pull_request.user.login) }} # zizmor: ignore[obfuscation]
     runs-on: ubuntu-latest
     permissions:
       contents: read            # Required to read repository data for checking if it's the user's first contribution