From 22fd5dc86780b4f055e642108f515f84aca3b8c1 Mon Sep 17 00:00:00 2001
From: batmanknows <122247678+batmnnn@users.noreply.github.com>
Date: Fri, 31 Jul 2026 02:40:48 +0530
Subject: [PATCH] ci: skip scheduled and release workflows on forks

These jobs need upstream secrets or write access and fail noisily when Actions are enabled on a fork.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .github/workflows/codeql.yml          | 1 +
 .github/workflows/nightly_build.yml   | 1 +
 .github/workflows/release.yml         | 3 +++
 .github/workflows/security_audit.yml  | 1 +
 .github/workflows/test262_release.yml | 1 +
 5 files changed, 7 insertions(+)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5f29620ad82..8eab5538352 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -11,6 +11,7 @@ permissions:
 jobs:
   analyze:
     name: Analyze
+    if: github.repository == 'boa-dev/boa'
     runs-on: ubuntu-latest
     timeout-minutes: 60
     permissions:
diff --git a/.github/workflows/nightly_build.yml b/.github/workflows/nightly_build.yml
index a16d14326ef..10773cdafa0 100644
--- a/.github/workflows/nightly_build.yml
+++ b/.github/workflows/nightly_build.yml
@@ -10,6 +10,7 @@ on:
 
 jobs:
   build:
+    if: github.repository == 'boa-dev/boa'
     permissions:
       contents: write
     strategy:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 79773a52aa7..5e8edd0c668 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,7 @@ permissions:
 jobs:
   publish:
     name: Publish crates
+    if: github.repository == 'boa-dev/boa'
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
@@ -50,6 +51,7 @@ jobs:
 
   npm_publish:
     name: Publish NPM package (wasm)
+    if: github.repository == 'boa-dev/boa'
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
@@ -93,6 +95,7 @@ jobs:
 
   release-binaries:
     name: Publish binaries
+    if: github.repository == 'boa-dev/boa'
     permissions:
       contents: write
     needs: publish
diff --git a/.github/workflows/security_audit.yml b/.github/workflows/security_audit.yml
index d882be5d736..4bd18493206 100644
--- a/.github/workflows/security_audit.yml
+++ b/.github/workflows/security_audit.yml
@@ -7,6 +7,7 @@ permissions:
   contents: read
 jobs:
   audit:
+    if: github.repository == 'boa-dev/boa'
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
diff --git a/.github/workflows/test262_release.yml b/.github/workflows/test262_release.yml
index 421a4dff66a..c9081cd7cb4 100644
--- a/.github/workflows/test262_release.yml
+++ b/.github/workflows/test262_release.yml
@@ -18,6 +18,7 @@ concurrency:
 jobs:
   update_test262_results:
     name: Update Test262 Results
+    if: github.repository == 'boa-dev/boa'
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps: