From 40cb3b1c13d580c71a31cda1cb33fd81afe383f2 Mon Sep 17 00:00:00 2001 From: Alexander Moisseev Date: Mon, 1 Dec 2025 08:34:53 +0300 Subject: [PATCH] [Test] Restrict public suffix sync workflow to upstream repository Restrict the scheduled/public-dispatch sync job so it runs only in the upstream repository (rspamd/rspamd) and not in forks. This prevents automated PRs from being opened in forks. --- .github/workflows/sync_public_suffix_list.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/sync_public_suffix_list.yml b/.github/workflows/sync_public_suffix_list.yml index a1d46b190e..7b3761961f 100644 --- a/.github/workflows/sync_public_suffix_list.yml +++ b/.github/workflows/sync_public_suffix_list.yml @@ -12,6 +12,7 @@ permissions: jobs: sync: + if: github.repository == 'rspamd/rspamd' runs-on: ubuntu-24.04 steps: - name: Checkout repository -- 2.47.3