Prevent CI jobs with secrets from running in forks

These Github actions will run only in the upstream repository

CLA: trivial

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/27275)

diff --git a/.github/workflows/build_quic_interop_container.yml b/.github/workflows/build_quic_interop_container.yml
index 28dc52743b839f5d1f83580a60ecb43ff63ac2b7..5d409cddd8794afeddd6350d044cfbadb6c3ee3b 100644 (file)
--- a/.github/workflows/build_quic_interop_container.yml
+++ b/.github/workflows/build_quic_interop_container.yml
@@ -7,6 +7,7 @@ on:
 
 jobs:
   update_quay_container:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/deploy-docs-openssl-org.yml b/.github/workflows/deploy-docs-openssl-org.yml
index 7b8e6838a7ead9b31801e976259d37a1dd6c0502..5554f07a4290600bf9758c40e92b78e4aa9b10af 100644 (file)
--- a/.github/workflows/deploy-docs-openssl-org.yml
+++ b/.github/workflows/deploy-docs-openssl-org.yml
@@ -10,6 +10,7 @@ on:
 
 jobs:
   trigger:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
       - name: "Trigger deployment workflow"

diff --git a/.github/workflows/static-analysis-on-prem.yml b/.github/workflows/static-analysis-on-prem.yml
index d47768dba4ad88e05ba3f4430821498a72a03dd7..735af6581a7ddb7e501c80d4689fc6d5d4958bad 100644 (file)
--- a/.github/workflows/static-analysis-on-prem.yml
+++ b/.github/workflows/static-analysis-on-prem.yml
@@ -17,6 +17,7 @@ permissions:
 
 jobs:
   coverity-analysis:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     container: quay.io/openssl-ci/coverity-analysis:2024.3.1
     steps:

diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 271e849da0affcd48f06eed5f820330e4f6466e8..7acae4ddff0223426c702b5a3eb30ca8cff21482 100644 (file)
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -18,6 +18,7 @@ permissions:
 
 jobs:
   coverity:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4