diff --git a/.github/workflows/windows-canary.yml b/.github/workflows/windows-canary.yml
index 7093efd2dc..2e0c921b0c 100644
--- a/.github/workflows/windows-canary.yml
+++ b/.github/workflows/windows-canary.yml
@@ -16,7 +16,10 @@ permissions:
 jobs:
   build:
     name: Build Windows canary
-    if: github.repository == 'block/buzz'
+    # Fork addition: mattbalza/buzz is how the Scalarly team gets a Windows
+    # installer at all. There is no signed Windows release for this fork, so
+    # this unsigned canary artifact *is* the shipping path — see BUZZ-SETUP.md.
+    if: contains(fromJSON('["block/buzz", "mattbalza/buzz"]'), github.repository)
     runs-on: windows-latest
     timeout-minutes: 60
     permissions: