diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
new file mode 100644
index 0000000..c6e00bc
--- /dev/null
+++ b/.github/workflows/android.yml
@@ -0,0 +1,46 @@
+name: Test workflow restrictions on forks
+
+on:
+  push:
+  pull_request:
+
+env:
+  is_job_restricted: ${{ (github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.pull_request.base.repo.id == github.event.pull_request.head.repo.id)) && 'true' || 'false' }}
+  source_repo: ${{ github.repository.name }}
+
+jobs:
+  selective:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: "debug"
+      run: |
+        # github.event_name: ${{ github.event_name }}
+        # github.event.pull_request.base.repo.id: ${{ github.event.pull_request.base.repo.id }}
+        # github.event.pull_request.head.repo.id: ${{ github.event.pull_request.head.repo.id }}
+        # github.env.is_job_restricted: ${{ github.env.is_job_restricted }}
+        # env.is_job_restricted: ${{ env.is_job_restricted }}
+        # bash: is_job_restricted: ${is_job_restricted}
+
+    - name: "simple action: must be executed on all WF kind"
+      run: echo "I must be executed on all WF kind"
+
+    - name: "only on PR from same repo: ${{ github.repository.name }}"
+      if: env.is_job_restricted == 'true'
+      run: echo "I must be executed only on repo ${{ github.repository.name }}"
+
+  global:
+    runs-on: ubuntu-latest
+    # env context is not available here, we have to use the full expressions
+    if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.pull_request.base.repo.id == github.event.pull_request.head.repo.id)
+
+    steps:
+    - name: "only on PR from same repo: ${{ github.repository.name }}"
+      run: echo "I must be executed only on repo ${{ github.repository.name }}"
+
+  no-restriction:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: "simple action: must be executed on all WF kind"
+      run: echo "I must be executed on all WF kind"