ci: gate element-hq-only workflows on fork

Skip upstream deploy/publish/release, org automation, translations and
PR previews via a repo guard; allow PRs to release/* base branches.
This commit is contained in:
2026-06-28 09:44:07 +02:00
parent cf917c1ed5
commit bd6241ad9d
33 changed files with 65 additions and 88 deletions
@@ -44,6 +44,7 @@ env:
permissions: {} # Uses ELEMENT_BOT_TOKEN
jobs:
prepare:
if: ${{ github.repository == 'element-hq/element-web' }}
uses: ./.github/workflows/build_desktop_prepare.yaml
permissions:
contents: read
@@ -57,6 +58,7 @@ jobs:
CF_R2_TOKEN: ${{ secrets.CF_R2_TOKEN }}
trigger-pro-pipeline:
if: ${{ github.repository == 'element-hq/element-web' }}
name: Trigger Pro pipeline
needs: prepare
runs-on: ubuntu-24.04
@@ -72,7 +74,7 @@ jobs:
}
windows:
if: github.event_name != 'workflow_dispatch' || inputs.windows
if: ${{ github.repository == 'element-hq/element-web' && (github.event_name != 'workflow_dispatch' || inputs.windows) }}
needs: prepare
name: Windows ${{ matrix.arch }}
strategy:
@@ -86,7 +88,7 @@ jobs:
version: ${{ needs.prepare.outputs.nightly-version }}
macos:
if: github.event_name != 'workflow_dispatch' || inputs.macos
if: ${{ github.repository == 'element-hq/element-web' && (github.event_name != 'workflow_dispatch' || inputs.macos) }}
needs: prepare
name: macOS
uses: ./.github/workflows/build_desktop_macos.yaml
@@ -97,7 +99,7 @@ jobs:
version: ${{ needs.prepare.outputs.nightly-version }}
linux:
if: github.event_name != 'workflow_dispatch' || inputs.linux
if: ${{ github.repository == 'element-hq/element-web' && (github.event_name != 'workflow_dispatch' || inputs.linux) }}
needs: prepare
name: Linux ${{ matrix.arch }} (sqlcipher ${{ matrix.sqlcipher }})
strategy:
@@ -118,7 +120,7 @@ jobs:
- windows
runs-on: ubuntu-24.04
name: ${{ needs.prepare.outputs.deploy == 'true' && 'Deploy' || 'Deploy (dry-run)' }}
if: always() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled')
if: ${{ github.repository == 'element-hq/element-web' && (always() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled')) }}
environment: ${{ needs.prepare.outputs.deploy == 'true' && 'packages.element.io' || '' }}
steps:
- name: Download artifacts
@@ -281,7 +283,7 @@ jobs:
needs: deploy
runs-on: ubuntu-24.04
name: Deploy builds to ESS
if: needs.prepare.outputs.deploy == 'true' && github.event_name == 'release'
if: ${{ github.repository == 'element-hq/element-web' && (needs.prepare.outputs.deploy == 'true' && github.event_name == 'release') }}
env:
BUCKET_NAME: "element-desktop-msi.onprem.element.io"
AWS_REGION: "eu-central-1"