diff --git a/.github/workflows/ci-copr.yml b/.github/workflows/ci-copr.yml
index 9c9cb0681da..2c2942cb347 100644
--- a/.github/workflows/ci-copr.yml
+++ b/.github/workflows/ci-copr.yml
@@ -17,13 +17,18 @@ on:
         required: false
 
 jobs:
+  organization:
+    uses: LizardByte/.github/.github/workflows/__call-organization.yml@master
+
   call-copr-ci:
+    needs: organization
+    if: needs.organization.outputs.allowed == 'true'
     permissions:
       contents: read
     uses: LizardByte/copr-ci/.github/workflows/copr-ci.yml@master
     with:
       copr_pr_webhook_token: "05fc9b07-a19b-4f83-89b2-ae1e7e0b5282"
-      github_org_owner: LizardByte
+      github_org_owner: ${{ github.repository_owner }}
       copr_ownername: lizardbyte
       auto_update_package: true
       job_timeout: 90
@@ -36,9 +41,10 @@ jobs:
     name: Release
     if:
       github.event_name == 'release' &&
-      startsWith(github.repository, 'LizardByte/') &&
+      needs.organization.outputs.allowed == 'true' &&
       github.event.release.prerelease == true
     needs:
+      - organization
       - call-copr-ci
     permissions:
       contents: write
diff --git a/.github/workflows/ci-freebsd.yml b/.github/workflows/ci-freebsd.yml
index d2c72e5f879..f0131704e48 100644
--- a/.github/workflows/ci-freebsd.yml
+++ b/.github/workflows/ci-freebsd.yml
@@ -157,7 +157,7 @@ jobs:
             -DSUNSHINE_ENABLE_PORTAL=ON \
             -DSUNSHINE_ENABLE_WAYLAND=ON \
             -DSUNSHINE_ENABLE_X11=ON \
-            -DSUNSHINE_PUBLISHER_NAME="${GITHUB_REPOSITORY_OWNER}" \
+            -DSUNSHINE_PUBLISHER_NAME="LizardByte" \
             -DSUNSHINE_PUBLISHER_WEBSITE="https://app.lizardbyte.dev" \
             -DSUNSHINE_PUBLISHER_ISSUE_URL="https://app.lizardbyte.dev/support"
 
diff --git a/.github/workflows/ci-linux.yml b/.github/workflows/ci-linux.yml
index e5b082ac988..fde99160c9f 100644
--- a/.github/workflows/ci-linux.yml
+++ b/.github/workflows/ci-linux.yml
@@ -77,7 +77,7 @@ jobs:
           chmod +x ./scripts/linux_build.sh
           echo "::add-matcher::.github/matchers/gcc.json"
           ./scripts/linux_build.sh \
-            --publisher-name="${GITHUB_REPOSITORY_OWNER}" \
+            --publisher-name="LizardByte" \
             --publisher-website="https://app.lizardbyte.dev" \
             --publisher-issue-url="https://app.lizardbyte.dev/support" \
             --skip-cleanup \
diff --git a/.github/workflows/ci-macos.yml b/.github/workflows/ci-macos.yml
index 9e2b18e485d..42147dd77cf 100644
--- a/.github/workflows/ci-macos.yml
+++ b/.github/workflows/ci-macos.yml
@@ -138,7 +138,7 @@ jobs:
             -DOpus_ROOT_DIR="$(brew --prefix opus 2>/dev/null)" \
             -DQt6_DIR="$(brew --prefix qtbase 2>/dev/null)/lib/cmake/Qt6" \
             -DQt6Svg_DIR="$(brew --prefix qtsvg 2>/dev/null)/lib/cmake/Qt6Svg" \
-            -DSUNSHINE_PUBLISHER_NAME="${GITHUB_REPOSITORY_OWNER}" \
+            -DSUNSHINE_PUBLISHER_NAME="LizardByte" \
             -DSUNSHINE_PUBLISHER_WEBSITE="https://app.lizardbyte.dev" \
             -DSUNSHINE_PUBLISHER_ISSUE_URL="https://app.lizardbyte.dev/support" \
             -DAPPLE_CODESIGN_IDENTITY="${APPLE_CODESIGN_IDENTITY}"
diff --git a/.github/workflows/ci-release.yml b/.github/workflows/ci-release.yml
index 08a9433e0c4..098940ed1bb 100644
--- a/.github/workflows/ci-release.yml
+++ b/.github/workflows/ci-release.yml
@@ -13,16 +13,22 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  organization:
+    uses: LizardByte/.github/.github/workflows/__call-organization.yml@master
+
   npm:
+    needs: organization
     name: NPM
     if: >-
       github.event.action == 'released' &&
-      github.repository_owner == 'LizardByte'
+      needs.organization.outputs.allowed == 'true'
     permissions:
       contents: read
       id-token: write  # required for provenance and OIDC
       packages: write
     uses: LizardByte/.github/.github/workflows/__call-update-npm.yml@master
+    secrets:
+      GH_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
     with:
       release_version: ${{ github.event.release.tag_name }}
 
@@ -39,8 +45,10 @@ jobs:
 
   cloudsmith:
     name: Cloudsmith
-    if: startsWith(github.repository, 'LizardByte/')
-    needs: copr
+    if: needs.organization.outputs.allowed == 'true'
+    needs:
+      - organization
+      - copr
     permissions:
       contents: read
     uses: ./.github/workflows/ci-cloudsmith.yml
diff --git a/.github/workflows/ci-windows.yml b/.github/workflows/ci-windows.yml
index badf24af48d..5062431dc94 100644
--- a/.github/workflows/ci-windows.yml
+++ b/.github/workflows/ci-windows.yml
@@ -220,7 +220,7 @@ jobs:
             -DBUILD_WERROR=ON \
             -DCMAKE_BUILD_TYPE=RelWithDebInfo \
             -DSUNSHINE_ASSETS_DIR=assets \
-            -DSUNSHINE_PUBLISHER_NAME="${GITHUB_REPOSITORY_OWNER}" \
+            -DSUNSHINE_PUBLISHER_NAME="LizardByte" \
             -DSUNSHINE_PUBLISHER_WEBSITE="https://app.lizardbyte.dev" \
             -DSUNSHINE_PUBLISHER_ISSUE_URL="https://app.lizardbyte.dev/support"
           echo "::add-matcher::.github/matchers/gcc.json"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a7ee2622ae4..af37f68ccff 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,6 +14,9 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  organization:
+    uses: LizardByte/.github/.github/workflows/__call-organization.yml@master
+
   github-env:
     name: GitHub Env Debug
     permissions:
@@ -21,9 +24,12 @@ jobs:
     uses: LizardByte/.github/.github/workflows/__call-github-env.yml@master
 
   release-setup:
+    needs: organization
     name: Release Setup
     outputs:
-      publish_release: ${{ steps.release-setup.outputs.publish_release }}
+      publish_release: >-
+        ${{ needs.organization.outputs.allowed == 'true' &&
+        steps.release-setup.outputs.publish_release == 'true' }}
       release_body: ${{ steps.release-setup.outputs.release_body }}
       release_commit: ${{ steps.release-setup.outputs.release_commit }}
       release_generate_release_notes: ${{ steps.release-setup.outputs.release_generate_release_notes }}
@@ -202,8 +208,9 @@ jobs:
     if: >-
       always() &&
       !cancelled() &&
-      startsWith(github.repository, 'LizardByte/')
+      needs.organization.outputs.allowed == 'true'
     needs:
+      - organization
       - build-freebsd
       - build-linux
       - build-archlinux
@@ -292,8 +299,9 @@ jobs:
     name: Release
     if:
       needs.release-setup.outputs.publish_release == 'true' &&
-      startsWith(github.repository, 'LizardByte/')
+      needs.organization.outputs.allowed == 'true'
     needs:
+      - organization
       - release-setup
       - build-archlinux
       - build-alpine
@@ -334,8 +342,9 @@ jobs:
     name: Release Homebrew Beta
     if:
       needs.release-setup.outputs.publish_release == 'true' &&
-      startsWith(github.repository, 'LizardByte/')
+      needs.organization.outputs.allowed == 'true'
     needs:
+      - organization
       - release-setup
       - build-homebrew
       - release