Skip agentics-maintenance jobs in forked repositories (#18532)

Copilot · pelikhan · web-flow · commit a7d371cc7e68 · 2026-02-26T08:59:00.000-08:00
* Initial plan

* Add fork guard if condition to all jobs in agentics-maintenance workflow

Co-authored-by: pelikhan &lt;4175913+pelikhan@users.noreply.github.com&gt;

---------

Co-authored-by: copilot-swe-agent[bot] &lt;198982749+Copilot@users.noreply.github.com&gt;
Co-authored-by: pelikhan &lt;4175913+pelikhan@users.noreply.github.com&gt;
Co-authored-by: Peli de Halleux &lt;pelikhan@users.noreply.github.com&gt;
diff --git a/.github/workflows/agentics-maintenance.yml b/.github/workflows/agentics-maintenance.yml
@@ -42,6 +42,7 @@ permissions: {}
 
 jobs:
   close-expired-entities:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     permissions:
       discussions: write
@@ -88,6 +89,7 @@ jobs:
             await main();
 
   compile-workflows:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     permissions:
       contents: read
@@ -128,6 +130,7 @@ jobs:
             await main();
 
   zizmor-scan:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     needs: compile-workflows
     permissions:
@@ -151,6 +154,7 @@ jobs:
           echo "✓ Zizmor security scan completed"
 
   secret-validation:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     permissions:
       contents: read
diff --git a/pkg/workflow/maintenance_workflow.go b/pkg/workflow/maintenance_workflow.go
@@ -140,6 +140,7 @@ permissions: {}
 
 jobs:
   close-expired-entities:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     permissions:
       discussions: write
@@ -218,6 +219,7 @@ jobs:
 		// Add compile-workflows job
 		yaml.WriteString(`
   compile-workflows:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     permissions:
       contents: read
@@ -263,6 +265,7 @@ jobs:
             await main();
 
   zizmor-scan:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     needs: compile-workflows
     permissions:
@@ -286,6 +289,7 @@ jobs:
           echo "✓ Zizmor security scan completed"
 
   secret-validation:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-slim
     permissions:
       contents: read
