From 52676db95997c171da3e6f3ce1d4c14d356f5b3d Mon Sep 17 00:00:00 2001
From: Sorawee Porncharoenwase <sorawee@Sorawees-MBP.hsd1.wa.comcast.net>
Date: Thu, 10 Dec 2020 05:58:13 -0800
Subject: [PATCH] CI: prevent forks from running jobs for self-hosted

---
 .github/workflows/PR_ARM32-fastbuild.yml | 2 ++
 .github/workflows/PR_ARM64-fastbuild.yml | 2 ++
 .github/workflows/chez-build.yml         | 1 +
 .github/workflows/ci-push-arm_linux.yml  | 5 +++++
 .github/workflows/ubsan-arm.yml          | 2 ++
 5 files changed, 12 insertions(+)

diff --git a/.github/workflows/PR_ARM32-fastbuild.yml b/.github/workflows/PR_ARM32-fastbuild.yml
index 0c60c2be61..0c557fbf09 100644
--- a/.github/workflows/PR_ARM32-fastbuild.yml
+++ b/.github/workflows/PR_ARM32-fastbuild.yml
@@ -4,6 +4,7 @@ on: [pull_request]
 
 jobs:
   build-racket3m:
+    if: github.repository == 'racket/racket'
     runs-on: [self-hosted, Linux, ARM]
 
     steps:
@@ -14,6 +15,7 @@ jobs:
       run: make CPUS=$(nproc) PKGS="" bc-in-place
 
   build-racketcs:
+    if: github.repository == 'racket/racket'
     runs-on: [self-hosted, Linux, ARM]
 
     steps:
diff --git a/.github/workflows/PR_ARM64-fastbuild.yml b/.github/workflows/PR_ARM64-fastbuild.yml
index 3f2fc06294..8cfdae54c6 100644
--- a/.github/workflows/PR_ARM64-fastbuild.yml
+++ b/.github/workflows/PR_ARM64-fastbuild.yml
@@ -4,6 +4,7 @@ on: [pull_request]
 
 jobs:
   build-racket3m:
+    if: github.repository == 'racket/racket'
     container:
       image: racket/racket-ci:latest
                 
@@ -17,6 +18,7 @@ jobs:
       run: make CPUS=$(nproc) PKGS="" bc-in-place
 
   build-racketcs:
+    if: github.repository == 'racket/racket'
     container:
       image: racket/racket-ci:latest
 
diff --git a/.github/workflows/chez-build.yml b/.github/workflows/chez-build.yml
index b7e7073080..80d745184a 100644
--- a/.github/workflows/chez-build.yml
+++ b/.github/workflows/chez-build.yml
@@ -59,6 +59,7 @@ jobs:
         run: ../../../.github/scripts/test.sh
 
   build-arm64:
+    if: github.repository == 'racket/racket'
     runs-on: [self-hosted, ARM64, Linux]
     container:
       image: racket/racket-ci:latest
diff --git a/.github/workflows/ci-push-arm_linux.yml b/.github/workflows/ci-push-arm_linux.yml
index 828aa294af..5bd3c1b3b9 100644
--- a/.github/workflows/ci-push-arm_linux.yml
+++ b/.github/workflows/ci-push-arm_linux.yml
@@ -9,6 +9,7 @@ jobs:
 # component finishes building.
 
   build-racketcgc:
+    if: github.repository == 'racket/racket'
     runs-on: [self-hosted, Linux, '${{ matrix.arch }}']
     container:
       image: racket/racket-ci:latest
@@ -68,6 +69,7 @@ jobs:
         path: /tmp/racketcgc-debian10-${{ matrix.cify }}-${{ matrix.arch }}_git${{ github.sha }}.tar.bz2
 
   build-racket3m:
+    if: github.repository == 'racket/racket'
     container:
       image: racket/racket-ci:latest
                 
@@ -146,6 +148,7 @@ jobs:
         path: /tmp/racket3m-debian10-${{ matrix.cify }}-${{ matrix.ep }}-${{ matrix.arch }}_git${{ github.sha }}.tar.bz2
 
   build-racketcs:
+    if: github.repository == 'racket/racket'
     container:
       image: racket/racket-ci:latest
 
@@ -202,6 +205,7 @@ jobs:
         path: /tmp/racketcs-debian10-${{ matrix.arch }}_git${{ github.sha }}.tar.bz2
 
   test-3m:
+    if: github.repository == 'racket/racket'
     container:
       image: racket/racket-ci:latest
       options: --init
@@ -277,6 +281,7 @@ jobs:
         run: raco test -c tests/syntax
 
   test-cs:
+    if: github.repository == 'racket/racket'
     container:
       image: racket/racket-ci:latest
       options: --init
diff --git a/.github/workflows/ubsan-arm.yml b/.github/workflows/ubsan-arm.yml
index 2fad70cc91..34d893e077 100644
--- a/.github/workflows/ubsan-arm.yml
+++ b/.github/workflows/ubsan-arm.yml
@@ -9,6 +9,7 @@ jobs:
 # Build jobs
 # These jobs build Racket using undefined behaviour sanitizers and gathers the results into a final log
   racket3m-ubsan:
+    if: github.repository == 'racket/racket'
     strategy:
       fail-fast: false
       matrix:
@@ -98,6 +99,7 @@ jobs:
         path: runtime-errors-${{ matrix.arch }}_git${{ github.sha }}.log
 
   racketcs-ubsan:
+    if: github.repository == 'racket/racket'
     strategy:
       fail-fast: false
       matrix: