diff --git a/.github/workflows/build_and_deploy.yml b/.github/workflows/build_and_deploy.yml
index acd0ee6..6e4ed21 100644
--- a/.github/workflows/build_and_deploy.yml
+++ b/.github/workflows/build_and_deploy.yml
@@ -39,10 +39,23 @@ jobs:
           path: ./build/blog
 
   # Deployment job: heavily inspired from https://swharden.com/blog/2022-03-20-github-actions-hugo/
-  # /!\ only triggers on push events and manually triggered
+  # /!\ only triggers on (push events AND non-fork repos) OR manually triggered
+  ## Required secrets:
+  #   - SSH_KNOWN_HOSTS
+  #   - PRIVATE_SSH_KEY
+  #   - CI_USER_NAME
+  #   - STATIC_WEBSITE_PATH
   deploy:
     needs: [build]
-    if: ${{ github.event_name == 'push' || github.event_name == 'workflow_dispatch' }}
+    # DISCLAIMER:
+    # The following is a very POOR solution to avoid *failing deploy step* due to missing secrets
+    # on fork repositories, but sadly the `env` context is not accessible from `jobs.<job_id>.if`:
+    # https://docs.github.com/en/actions/learn-github-actions/contexts#context-availability
+    #
+    # If for any reason you want to trigger this step on your fork remove the following line,
+    # trigger manually or open an issue https://github.com/iScsc/blog.iscsc.fr/issues,
+    # we'll find a better way to skip this step.
+    if: ${{ (github.event_name == 'push' && github.event.repository.fork == 'false') || github.event_name == 'workflow_dispatch' }}
     runs-on: ubuntu-latest
     steps:
       - name: 🛠️ Setup build directory
diff --git a/src/themes/poison b/src/themes/poison
index f20c309..62eecf7 160000
--- a/src/themes/poison
+++ b/src/themes/poison
@@ -1 +1 @@
-Subproject commit f20c309bdad9e9a98ca1cbf729f416be4c1e42be
+Subproject commit 62eecf75eb5bc31a75322f5373754e1d1999761b