diff --git a/.github/workflows/CI-cygwin.yml.deactivated b/.github/workflows/CI-cygwin.yml
similarity index 81%
rename from .github/workflows/CI-cygwin.yml.deactivated
rename to .github/workflows/CI-cygwin.yml
index b9ea30470da..fe9dcc65445 100644
--- a/.github/workflows/CI-cygwin.yml.deactivated
+++ b/.github/workflows/CI-cygwin.yml
@@ -1,7 +1,5 @@
-# Some convenient links:
-# - https://github.com/actions/virtual-environments/blob/master/images/win/Windows2019-Readme.md
-#
-
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: CI-cygwin
 
 on:
@@ -34,6 +32,7 @@ jobs:
       fail-fast: false
 
     runs-on: ${{ matrix.os }}
+    if: false # the hard-coded cygwin repository has changed so the setup step fails - TODO: re-enable
 
     steps:
       - uses: actions/checkout@v3
diff --git a/.github/workflows/CI-mingw.yml b/.github/workflows/CI-mingw.yml
index 6a1b8fde64c..04145d72f89 100644
--- a/.github/workflows/CI-mingw.yml
+++ b/.github/workflows/CI-mingw.yml
@@ -1,7 +1,5 @@
-# Some convenient links:
-# - https://github.com/actions/virtual-environments/blob/master/images/win/Windows2019-Readme.md
-#
-
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: CI-mingw
 
 on:
diff --git a/.github/workflows/CI-windows.yml b/.github/workflows/CI-windows.yml
index 53458b87701..3d0db730702 100644
--- a/.github/workflows/CI-windows.yml
+++ b/.github/workflows/CI-windows.yml
@@ -1,7 +1,5 @@
-# Some convenient links:
-# - https://github.com/actions/virtual-environments/blob/master/images/win/Windows2019-Readme.md
-#
-
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: CI-windows
 
 on:
diff --git a/.github/workflows/buildman.yml b/.github/workflows/buildman.yml
index cb7fc655bee..1d6804715f2 100644
--- a/.github/workflows/buildman.yml
+++ b/.github/workflows/buildman.yml
@@ -1,3 +1,5 @@
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: Build manual
 
 on:
diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
index 19c40de61c9..cfc3bc12966 100644
--- a/.github/workflows/cifuzz.yml
+++ b/.github/workflows/cifuzz.yml
@@ -1,8 +1,16 @@
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: CIFuzz
+
 on: [pull_request]
+
+permissions:
+  contents: read
+
 jobs:
   Fuzzing:
     runs-on: ubuntu-latest
+    if: ${{ github.repository_owner == 'danmar' }}
     steps:
     - name: Build Fuzzers
       id: build
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index f486cf9e24f..d553598cfc8 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -1,3 +1,5 @@
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: "CodeQL"
 
 on:
diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 9dad4d443f3..148fc15462d 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -1,4 +1,5 @@
-
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: Coverity
 
 on:
diff --git a/.github/workflows/cppcheck-premium.yml b/.github/workflows/cppcheck-premium.yml
index 9604d29542a..a9b40184726 100644
--- a/.github/workflows/cppcheck-premium.yml
+++ b/.github/workflows/cppcheck-premium.yml
@@ -1,4 +1,5 @@
-
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: cppcheck-premium
 
 on:
diff --git a/.github/workflows/iwyu.yml b/.github/workflows/iwyu.yml
index a4c2c2a638f..4bcd3eceb58 100644
--- a/.github/workflows/iwyu.yml
+++ b/.github/workflows/iwyu.yml
@@ -18,6 +18,7 @@ jobs:
         image: ["opensuse/tumbleweed:latest"] # "fedora:latest" / "debian:unstable" / "archlinux:latest"
 
     runs-on: ubuntu-22.04
+    if: ${{ github.repository_owner == 'danmar' }}
 
     container:
       image: ${{ matrix.image }}
@@ -118,6 +119,7 @@ jobs:
   clang-include-cleaner:
 
     runs-on: ubuntu-22.04
+    if: ${{ github.repository_owner == 'danmar' }}
 
     env:
       QT_VERSION: 5.15.2
diff --git a/.github/workflows/release-windows.yml b/.github/workflows/release-windows.yml
index f10a67eaed2..ca4bbac67d8 100644
--- a/.github/workflows/release-windows.yml
+++ b/.github/workflows/release-windows.yml
@@ -1,7 +1,5 @@
-# Some convenient links:
-# - https://github.com/actions/virtual-environments/blob/master/images/win/Windows2019-Readme.md
-#
-
+# Syntax reference https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
+# Environment reference https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
 name: release-windows
 
 on:
@@ -24,6 +22,7 @@ jobs:
   build:
 
     runs-on: windows-2022
+    if: ${{ github.repository_owner == 'danmar' }}
 
     env:
       # see https://www.pcre.org/original/changelog.txt