diff --git a/.github/workflows/bundleAndDeploy.yml b/.github/workflows/bundleAndDeploy.yml
index 0c2722a..2511f95 100644
--- a/.github/workflows/bundleAndDeploy.yml
+++ b/.github/workflows/bundleAndDeploy.yml
@@ -84,6 +84,4 @@ jobs:
               workflow_id: 'updateFromUpstream.yml',
               ref: 'main'
             });
-            console.log(`Workflow triggered with status ${res.status}`);
-        env:
-          GITHUB_TOKEN: ${{ secrets.PAT }}
\ No newline at end of file
+            console.log(`Workflow triggered with status ${res.status}`);
\ No newline at end of file
diff --git a/.github/workflows/updateFromUpstream.yml b/.github/workflows/updateFromUpstream.yml
index 169f28d..17cc81f 100644
--- a/.github/workflows/updateFromUpstream.yml
+++ b/.github/workflows/updateFromUpstream.yml
@@ -1,11 +1,13 @@
 name: Update from Upstream
 on:
   workflow_dispatch: # triggered by bundleAndDeploy.yml
-permissions: read-all
+permissions:
+  contents: write
 jobs:
   update:
     name: Update
     runs-on: ubuntu-latest
+    if: github.repository == 'HoloPrint-MC/holoprint-mc.github.io'
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4.1.1