diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 713d9ddc5..be19b6bfd 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -638,7 +638,8 @@ freebsd-13-x86_64:
       - "_build/meson-logs"
 
 macos-x86_64:
-  extends: .only-origin-or-manual
+  # The macOS runner is not allowed in forks. This is about trust, not capacity.
+  extends: .only-origin
   stage: build
   tags:
     - macosintel