build: prevent external forks from publishing

postfinance · Nov 30, 2021 · b0754ed · b0754ed
1 parent 356d806
commit b0754ed
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -95,7 +95,7 @@ jobs:
         run: ct install --target-branch=main --chart-dirs=deploy/charts
 
   publish-tagged:
-    if: "startsWith(github.ref, 'refs/tags/v') && github.repository == 'postfinance/kubelet-csr-approver'"
+    if: "startsWith(github.ref, 'refs/tags/v') && ${{ !github.event.pull_request.head.repo.fork }}"
     needs:
     - lint
     - test
@@ -132,7 +132,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
 
   publish-untagged:
-    if: "!startsWith(github.ref, 'refs/tags/v') && github.repository == 'postfinance/kubelet-csr-approver'"
+    if: "!startsWith(github.ref, 'refs/tags/v') && ${{ !github.event.pull_request.head.repo.fork }}"
     needs:
     - lint
     - test