diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index c22f7b26d..1b8e57719 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -41,6 +41,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to the Container registry
+        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
         uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
@@ -88,6 +89,7 @@ jobs:
 
       - name: Docker Scout
         id: docker-scout
+        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
         uses: docker/scout-action@v1
         with:
           dockerhub-user: ${{ secrets.DOCKER_SCOUT_USER }}
diff --git a/docs/release-notes/change-log.md b/docs/release-notes/change-log.md
index 8977fb67e..aa6854c32 100644
--- a/docs/release-notes/change-log.md
+++ b/docs/release-notes/change-log.md
@@ -9,6 +9,12 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## Unreleased
+
+### Fixed
+
+- CI: Docker image login, build and push are now skipped for fork PRs; image is still built (without push) to validate the Dockerfile.
+
 ## v1.18.5
 
 ### Server