From: Vladimír Chlup <vchlup@redhat.com>
Date: Fri, 4 Apr 2025 08:50:22 +0000 (+0200)
Subject: Prevent CI jobs with secrets from running in forks
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ee52d7d327e237ce3e45ba736e2e20b7793c4254;p=thirdparty%2Fopenssl.git

Prevent CI jobs with secrets from running in forks

These Github actions will run only in the upstream repository

CLA: trivial

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/27275)
---

diff --git a/.github/workflows/build_quic_interop_container.yml b/.github/workflows/build_quic_interop_container.yml
index 28dc52743b8..5d409cddd87 100644
--- a/.github/workflows/build_quic_interop_container.yml
+++ b/.github/workflows/build_quic_interop_container.yml
@@ -7,6 +7,7 @@ on:
 
 jobs:
   update_quay_container:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/deploy-docs-openssl-org.yml b/.github/workflows/deploy-docs-openssl-org.yml
index 7b8e6838a7e..5554f07a429 100644
--- a/.github/workflows/deploy-docs-openssl-org.yml
+++ b/.github/workflows/deploy-docs-openssl-org.yml
@@ -10,6 +10,7 @@ on:
 
 jobs:
   trigger:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
       - name: "Trigger deployment workflow"
diff --git a/.github/workflows/static-analysis-on-prem.yml b/.github/workflows/static-analysis-on-prem.yml
index d47768dba4a..735af6581a7 100644
--- a/.github/workflows/static-analysis-on-prem.yml
+++ b/.github/workflows/static-analysis-on-prem.yml
@@ -17,6 +17,7 @@ permissions:
 
 jobs:
   coverity-analysis:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     container: quay.io/openssl-ci/coverity-analysis:2024.3.1
     steps:
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 271e849da0a..7acae4ddff0 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -18,6 +18,7 @@ permissions:
 
 jobs:
   coverity:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4