diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0c58d98e..8f67bc74 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -384,6 +384,7 @@ jobs:
 
   create_manifest_list:
     name: Build and publish manifest list
+    if: ${{ !github.event.pull_request.head.repo.fork }}
     needs:
       - package_and_publish
     runs-on: ubuntu-latest
diff --git a/default.nix b/default.nix
index 4932cb85..cea676d7 100644
--- a/default.nix
+++ b/default.nix
@@ -16,10 +16,6 @@
       stackable-secret-operator = attrs: {
         buildInputs = [ pkgs.protobuf pkgs.rustfmt ];
       };
-      stackable-opa-user-info-fetcher = attrs: {
-        # TODO: why is this not pulled in via libgssapi-sys?
-        buildInputs = [ pkgs.krb5 ];
-      };
       krb5-sys = attrs: {
         nativeBuildInputs = [ pkgs.pkg-config ];
         buildInputs = [ pkgs.krb5 ];