diff --git a/.github/workflows/CI-taptests-groups.yml b/.github/workflows/CI-taptests-groups.yml
index 01f8ea76f..d5ab4aba9 100644
--- a/.github/workflows/CI-taptests-groups.yml
+++ b/.github/workflows/CI-taptests-groups.yml
@@ -2,10 +2,14 @@ name: CI-taptests-groups
 run-name: '${{ github.event.workflow_run && github.event.workflow_run.head_branch || github.ref_name }} ${{ github.workflow }} ${{ github.event.workflow_run && github.event.workflow_run.head_sha || github.sha }}'
 
 on:
+  # Auto-triggering disabled: jenkins-build-scripts repo access currently
+  # returns HTTP 403 from this workflow (same root cause as
+  # CI-repltests / CI-shuntest). Re-enable by restoring the workflow_run
+  # trigger once jenkins-build-scripts access is fixed.
   workflow_dispatch:
-  workflow_run:
-    workflows: [ CI-trigger ]
-    types: [ completed ]
+  # workflow_run:
+  #   workflows: [ CI-trigger ]
+  #   types: [ completed ]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.workflow_run && github.event.workflow_run.head_branch || github.ref_name }}