From c35f2eda069bbcd16cb4ede094001f547f311486 Mon Sep 17 00:00:00 2001
From: Bernhard Kaindl <bernhard.kaindl@cloud.com>
Date: Fri, 6 Jan 2023 12:00:00 +0100
Subject: [PATCH] CI: Run CodeQL in main repo only

Signed-off-by: Bernhard Kaindl <bernhard.kaindl@cloud.com>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
---
 .github/workflows/codeql.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b1143a8..997ec43 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -9,6 +9,9 @@ on:
 
 jobs:
   analyse:
+    # https://github.com/orgs/community/discussions/26409 (private secrets):
+    # Run this job if the feature branch is in the main repo (not in a fork):
+    if: github.event.pull_request.head.repo.full_name == github.repository
 
     strategy:
       matrix:
-- 
2.39.5