CI: Run CodeQL in main repo only

Signed-off-by: Bernhard Kaindl <bernhard.kaindl@cloud.com>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b1143a8f04f3ea246dc40c7a820e3e259827dd5c..997ec43a543c3876ca1affda5aac7d6c159da055 100644 (file)
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -9,6 +9,9 @@ on:
 
 jobs:
   analyse:
+    # https://github.com/orgs/community/discussions/26409 (private secrets):
+    # Run this job if the feature branch is in the main repo (not in a fork):
+    if: github.event.pull_request.head.repo.full_name == github.repository
 
     strategy:
       matrix: