diff --git a/.github/workflows/build-push-cft-devtools.yml b/.github/workflows/build-push-cft-devtools.yml index 37d59589085..df94aaf2163 100644 --- a/.github/workflows/build-push-cft-devtools.yml +++ b/.github/workflows/build-push-cft-devtools.yml @@ -13,6 +13,7 @@ jobs: build-push-dev-tools: name: Build and push new CFT dev tools image runs-on: ubuntu-latest + if: github.repository == 'GoogleCloudPlatform/cloud-foundation-toolkit' permissions: contents: 'read' diff --git a/.github/workflows/release-cli.yml b/.github/workflows/release-cli.yml index f7f2b92ee65..25a03acab4b 100644 --- a/.github/workflows/release-cli.yml +++ b/.github/workflows/release-cli.yml @@ -14,6 +14,7 @@ jobs: release-new-cli: name: Release new CLI versions runs-on: ubuntu-latest + if: github.repository == 'GoogleCloudPlatform/cloud-foundation-toolkit' permissions: contents: 'write' diff --git a/.github/workflows/update-tooling.yml b/.github/workflows/update-tooling.yml index 481729bff90..7658b440a69 100644 --- a/.github/workflows/update-tooling.yml +++ b/.github/workflows/update-tooling.yml @@ -27,6 +27,8 @@ env: jobs: update-tools: runs-on: ubuntu-latest + if: github.repository == 'GoogleCloudPlatform/cloud-foundation-toolkit' + steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: