CI: Prevent scheduled jobs from running in forks

There is no reason to run them in forks, and some of them fail because
they try to run on macos-15-large which is not generally available.

Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29042)

diff --git a/.github/workflows/coveralls.yml b/.github/workflows/coveralls.yml
index 0e0f1fa92137f2e9bb6bb2b9d80ef52c57419d2c..9b73829f93d24aa79c99c83fb8beb3277541608c 100644 (file)
--- a/.github/workflows/coveralls.yml
+++ b/.github/workflows/coveralls.yml
@@ -73,6 +73,7 @@ jobs:
           echo "branches<<EOF"$'\n'"$MATRIX"$'\n'EOF >> "$GITHUB_OUTPUT"
 
   coverage:
+    if: github.repository == 'openssl/openssl'
     needs: define-matrix
     permissions:
       checks: write     # for coverallsapp/github-action to create new checks

diff --git a/.github/workflows/interop-tests.yml b/.github/workflows/interop-tests.yml
index aa4d996763642b21e2d0118a0f1b4fa74423a0e5..be57d934274626667b5b18d455deb6f978ee29e6 100644 (file)
--- a/.github/workflows/interop-tests.yml
+++ b/.github/workflows/interop-tests.yml
@@ -11,6 +11,7 @@ on:
 
 jobs:
   test:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-22.04
     container:
       image: docker.io/fedora:40
@@ -54,6 +55,7 @@ jobs:
           openssl version
           echo "Finished - important to prevent unwanted output truncating"
   openssh_interop:
+    if: github.repository == 'openssl/openssl'
     name: "openssh interop ${{ matrix.branch.openssl }}"
     strategy:
       fail-fast: false

diff --git a/.github/workflows/os-zoo.yml b/.github/workflows/os-zoo.yml
index e705b4bbbddb23d5d0906eb3b213a8af34aed009..1f84e11fb4bb8176f501314362f9d4b49efebd8c 100644 (file)
--- a/.github/workflows/os-zoo.yml
+++ b/.github/workflows/os-zoo.yml
@@ -17,6 +17,7 @@ permissions:
 
 jobs:
   alpine:
+    if: github.repository == 'openssl/openssl'
     strategy:
       fail-fast: false
       matrix:
@@ -52,6 +53,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   linux:
+    if: github.repository == 'openssl/openssl'
     strategy:
       fail-fast: false
       matrix:
@@ -101,6 +103,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   macos:
+    if: github.repository == 'openssl/openssl'
     strategy:
       fail-fast: false
       matrix:
@@ -124,6 +127,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   windows:
+    if: github.repository == 'openssl/openssl'
     strategy:
       fail-fast: false
       matrix:
@@ -245,6 +249,7 @@ jobs:
 
   freebsd-x86_64:
     runs-on: ubuntu-latest
+    if: github.repository == 'openssl/openssl'
     steps:
     - uses: actions/checkout@v4
     - name: config

diff --git a/.github/workflows/provider-compatibility.yml b/.github/workflows/provider-compatibility.yml
index 00ebb8f2c745d1492ac5af2c2b00cbf32faf05ba..dc4789acb55d6655635414f84f70e67143926db6 100644 (file)
--- a/.github/workflows/provider-compatibility.yml
+++ b/.github/workflows/provider-compatibility.yml
@@ -28,6 +28,7 @@ env:
 
 jobs:
   fips-releases:
+    if: github.repository == 'openssl/openssl'
     strategy:
       matrix:
         release: [
@@ -103,6 +104,7 @@ jobs:
           retention-days: 7
 
   development-branches:
+    if: github.repository == 'openssl/openssl'
     strategy:
       matrix:
         branch: [
@@ -203,6 +205,7 @@ jobs:
           retention-days: 7
 
   cross-testing:
+    if: github.repository == 'openssl/openssl'
     needs: [fips-releases, development-branches]
     runs-on: ubuntu-latest
     strategy:

diff --git a/.github/workflows/riscv-more-cross-compiles.yml b/.github/workflows/riscv-more-cross-compiles.yml
index 09049ae93562e4cfe817e621ceeba2917af36e22..98e85211e08accae7fec8ddc8e2dd873f970cb58 100644 (file)
--- a/.github/workflows/riscv-more-cross-compiles.yml
+++ b/.github/workflows/riscv-more-cross-compiles.yml
@@ -26,7 +26,7 @@ jobs:
     # push event commit message contains '[riscv ci]'
     # cron job
     # manual dispatch
-    if: contains(github.event.pull_request.title, 'riscv') || contains(github.event.pull_request.title, 'RISC-V') || contains(github.event.pull_request.body, '[riscv ci]') || contains(github.event.head_commit.message, '[riscv ci]') || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
+    if: contains(github.event.pull_request.title, 'riscv') || contains(github.event.pull_request.title, 'RISC-V') || contains(github.event.pull_request.body, '[riscv ci]') || contains(github.event.head_commit.message, '[riscv ci]') || (github.event_name == 'schedule' && github.repository == 'openssl/openssl') || github.event_name == 'workflow_dispatch'
     strategy:
       fail-fast: false
       matrix:

diff --git a/.github/workflows/run-checker-daily.yml b/.github/workflows/run-checker-daily.yml
index 2f267df50342a0dc8d2d8d08f65b27aa82fc5e44..a6718f68f9f96d878118f1e1d5f5e530c44b974b 100644 (file)
--- a/.github/workflows/run-checker-daily.yml
+++ b/.github/workflows/run-checker-daily.yml
@@ -18,6 +18,7 @@ permissions:
 
 jobs:
   run-checker:
+    if: github.repository == 'openssl/openssl'
     strategy:
       fail-fast: false
       matrix:
@@ -154,6 +155,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   run-checker-sctp:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
@@ -193,6 +195,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   enable_brotli_dynamic:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - name: install brotli
@@ -215,6 +218,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   enable_zstd_dynamic:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - name: install zstd
@@ -237,6 +241,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   enable_brotli_and_zstd_dynamic:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - name: install brotli and zstd
@@ -260,6 +265,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   malloc_failure_testing:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - name: checkout openssl
@@ -282,6 +288,7 @@ jobs:
         make TESTS=test_handshake-memfail test
 
   enable_brotli_and_asan_ubsan:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - name: install brotli
@@ -308,6 +315,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4} OPENSSL_TEST_RAND_ORDER=0
 
   enable_zstd_and_asan_ubsan:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - name: install zstd
@@ -334,6 +342,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4} OPENSSL_TEST_RAND_ORDER=0
 
   enable_tfo:
+    if: github.repository == 'openssl/openssl'
     strategy:
       matrix:
         os: [ ubuntu-latest, macos-15, macos-15-large ]
@@ -352,6 +361,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   enable_buildtest:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
@@ -369,6 +379,7 @@ jobs:
       run: make test HARNESS_JOBS=${HARNESS_JOBS:-4}
 
   memory_sanitizer_slh_dsa:
+    if: github.repository == 'openssl/openssl'
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4