diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 10d6866e6..f0d4da78f 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -3,13 +3,12 @@ name: auto-merge
 on:
   pull_request_target:
 
-# No GITHUB_TOKEN permissions, as we use AUTOMERGE_TOKEN instead.
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   auto-merge:
+    if: github.repository_owner == 'mdn'
     uses: mdn/workflows/.github/workflows/auto-merge.yml@main
-    with:
-      target-repo: "mdn/todo-react"
     secrets:
       GH_TOKEN: ${{ secrets.AUTOMERGE_TOKEN }}