From 13a9f6402fb77a31499bf758b56ca42b79936706 Mon Sep 17 00:00:00 2001 From: Ogulcan Celik Date: Fri, 28 Aug 2026 18:05:29 +0300 Subject: ci: restrict release workflows to canonical repository --- .github/workflows/release.yml | 6 ++++++ 1 file changed, 6 insertions(+) (limited to '.github/workflows/release.yml') diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1318e138..a7cc3558 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,6 +14,7 @@ env: jobs: flake-check: + if: github.repository == 'herdrdev/herdr' runs-on: ubuntu-latest permissions: contents: read @@ -36,6 +37,7 @@ jobs: nix flake check --all-systems --no-build --print-build-logs build: + if: github.repository == 'herdrdev/herdr' permissions: contents: read strategy: @@ -181,6 +183,7 @@ jobs: path: ${{ matrix.name }} validate-release-inputs: + if: github.repository == 'herdrdev/herdr' runs-on: ubuntu-latest permissions: contents: read @@ -204,6 +207,7 @@ jobs: release: needs: [build, flake-check, validate-release-inputs] + if: github.repository == 'herdrdev/herdr' runs-on: ubuntu-latest permissions: contents: write @@ -232,6 +236,7 @@ jobs: close-released-issues: needs: release + if: github.repository == 'herdrdev/herdr' runs-on: ubuntu-latest continue-on-error: true permissions: @@ -368,6 +373,7 @@ jobs: update-latest-json: needs: release + if: github.repository == 'herdrdev/herdr' runs-on: ubuntu-latest concurrency: group: docs-publish-master -- cgit v1.2.3