fix: restrict GitHub Actions to run only on original repository

.github/workflows/ci.yaml

@@ -6,6 +6,7 @@ on:
         branches: [main]
 jobs:
     check:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         env:
             OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}

.github/workflows/codeql.yml

@@ -10,6 +10,7 @@ on:
 
 jobs:
     analyze:
+        if: github.repository == 'elizaOS/eliza'
         name: Analyze (${{ matrix.language }})
         runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
         permissions:

.github/workflows/generate-changelog.yml

@@ -5,6 +5,7 @@ on:
             - "*"
 jobs:
     changelog:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         permissions:
             contents: write

.github/workflows/generate-readme-translations.yml

@@ -6,6 +6,7 @@ on:
 
 jobs:
     translation:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         strategy:
             matrix:
@@ -74,6 +75,7 @@ jobs:
                   path: README_${{ matrix.language.code }}.md
 
     commit:
+        if: github.repository == 'elizaOS/eliza'
         needs: translation
         runs-on: ubuntu-latest
         steps:

.github/workflows/greetings.yml

@@ -4,6 +4,7 @@ on: [pull_request_target, issues]
 
 jobs:
     greeting:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         permissions:
             issues: write

.github/workflows/image.yaml

@@ -15,6 +15,7 @@ env:
 # There is a single job in this workflow. It's configured to run on the latest available version of Ubuntu.
 jobs:
     build-and-push-image:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         # Sets the permissions granted to the `GITHUB_TOKEN` for the actions in this job.
         permissions:

.github/workflows/integrationTests.yaml

@@ -9,6 +9,7 @@ on:
 
 jobs:
   integration-tests:
+    if: github.event.pull_request.head.repo.owner.login == github.repository_owner
     runs-on: ubuntu-latest
     env:
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}

.github/workflows/jsdoc-automation.yml

@@ -40,6 +40,7 @@ on:
 
 jobs:
     generate-docs:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
 
         env:

.github/workflows/minimal-merge-queue.yml

@@ -4,6 +4,7 @@ on:
         types: [checks_requested]
 jobs:
     minimal-check:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         steps:
             - name: Always pass

.github/workflows/pnpm-lockfile-check.yml

@@ -6,6 +6,7 @@ on:
 
 jobs:
     check-lockfile:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4

.github/workflows/pr.yaml

@@ -6,6 +6,7 @@ on:
 
 jobs:
     check-pr-title:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
 
         steps:

.github/workflows/pre-release.yml

@@ -10,6 +10,7 @@ on:
 
 jobs:
     release:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4

.github/workflows/release.yaml

@@ -7,6 +7,7 @@ on:
 
 jobs:
     release:
+        if: github.repository == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         steps:
             - uses: actions/checkout@v4

.github/workflows/require-develop.yml

@@ -8,6 +8,8 @@ on:
             - edited
 jobs:
     check-branches:
+        # Using a different approach that will definitely skip this for forks
+        if: github.event.pull_request.head.repo.owner.login == github.repository_owner
         runs-on: ubuntu-latest
         steps:
             - name: Check branches

.github/workflows/smoke-tests.yml

@@ -9,6 +9,7 @@ on:
 
 jobs:
   smoke-tests:
+    if: github.repository == 'elizaOS/eliza'
     runs-on: ubuntu-latest
     env:
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}

.github/workflows/stale.yml

@@ -6,6 +6,7 @@ on:
 
 jobs:
     stale:
+        if: github.repository == 'elizaOS/eliza' && github.event.pull_request.head.repo.full_name == 'elizaOS/eliza'
         runs-on: ubuntu-latest
         permissions:
             issues: write