Don't run snyk on forks

Signed-off-by: Iliya Savov <[email protected]>
hashgraph · Apr 20, 2023 · 6d58b9b · 6d58b9b
1 parent 5930069
commit 6d58b9b
Showing 1 changed file with 21 additions and 3 deletions.
diff --git a/.github/workflows/comp-compile-pbj-code.yaml b/.github/workflows/comp-compile-pbj-code.yaml
@@ -190,7 +190,13 @@ jobs:
       - name: Gradle Snyk Test (PBJ Core)
         id: gradle-snyk-test
         uses: gradle/gradle-build-action@v2
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && always()}}
+        if: >- 
+          ${{
+            inputs.enable-snyk-scan &&
+            github.event.pull_request.head.repo.full_name == github.repository &&
+            always() &&
+            !cancelled() 
+          }}
         with:
           gradle-version: ${{ inputs.gradle-version }}
           build-root-directory: ${{ env.PBJ_CORE }}
@@ -201,7 +207,13 @@ jobs:
       - name: Gradle Snyk Code Test (PBJ Core)
         id: gradle-snyk-code
         uses: gradle/gradle-build-action@v2
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && always()}}
+        if: >- 
+          ${{
+            inputs.enable-snyk-scan &&
+            github.event.pull_request.head.repo.full_name == github.repository &&
+            always() &&
+            !cancelled() 
+          }}
         with:
           gradle-version: ${{ inputs.gradle-version }}
           build-root-directory: ${{ env.PBJ_CORE }}
@@ -214,7 +226,13 @@ jobs:
         run: npm install -g snyk-to-html @wcj/html-to-markdown-cli
 
       - name: Publish Snyk Results
-        if: ${{ inputs.enable-snyk-scan && !cancelled() && always()}}
+        if: >- 
+          ${{
+            inputs.enable-snyk-scan &&
+            github.event.pull_request.head.repo.full_name == github.repository &&
+            always() &&
+            !cancelled() 
+          }}
         run: |
           snyk-to-html -i build/reports/snyk-test.json -o build/reports/snyk-test.html && \
           html-to-markdown build/reports/snyk-test.html -o  build/reports/snyk && \