[Test] Restrict public suffix sync workflow to upstream repository

Restrict the scheduled/public-dispatch sync job so it runs only in the upstream repository (rspamd/rspamd) and not in forks. This prevents automated PRs from being opened in forks.

diff --git a/.github/workflows/sync_public_suffix_list.yml b/.github/workflows/sync_public_suffix_list.yml
index a1d46b190e4ff02424422270eb737ba809d4f325..7b3761961fed8dfe3b0fe51f9ddc7f09dfa82719 100644 (file)
--- a/.github/workflows/sync_public_suffix_list.yml
+++ b/.github/workflows/sync_public_suffix_list.yml
@@ -12,6 +12,7 @@ permissions:
 
 jobs:
   sync:
+    if: github.repository == 'rspamd/rspamd'
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository