From 922a59fb02d579ee18db12216c6b814dc4341b17 Mon Sep 17 00:00:00 2001
From: Rob Nester <rnester@redhat.com>
Date: Wed, 14 Oct 2026 11:18:29 -0400
Subject: [PATCH] Guard website deployment against fork execution

Keep website builds available to forks while restricting GitHub Pages deployment to the canonical policy-builder repository.

Co-Authored-By: Codex <codex@openai.com>

Ref: EC-2232
---
 .github/workflows/publish.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index c9a81b6..060d436 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -33,6 +33,7 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
     needs: build
+    if: github.repository == 'conforma/policy-builder'
     steps:
       - name: Download website artifact
         uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2