Disable workflows for a forked repository

.github/workflows/ci.yml

@@ -26,6 +26,7 @@ jobs:
  metadata:
  name: Retrieve PR info
  runs-on: ubuntu-latest
+ if: ${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }}
  permissions:
  pull-requests: read
 

.github/workflows/cla_assistant.yml

@@ -9,6 +9,7 @@ name: "CLA bot"
 jobs:
  cla-acknowledgement:
  runs-on: ubuntu-latest
+ if: ${{ ! github.event.repository.fork }}
  name: "Check that the CLA has been acknowledged"
  steps:
  - name: "CLA Assistant"

.github/workflows/clean_caches.yml

@@ -30,7 +30,7 @@ name: Clean GitHub caches
 jobs:
  automatic_cleanup:
  name: Clean up GitHub caches produced by other workflows
- if: github.event_name == 'workflow_run'
+ if: (${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }} && github.event_name == 'workflow_run')
  permissions: write-all
  runs-on: ubuntu-latest
 
@@ -68,7 +68,7 @@ jobs:
 
  selective_cleanup:
  name: Clean up selective GitHub caches
- if: (github.event_name == 'workflow_dispatch' && inputs.cache_keys != '' )
+ if: (${{ ! github.event.repository.fork }} && github.event_name == 'workflow_dispatch' && inputs.cache_keys != '' )
  runs-on: ubuntu-latest
  permissions: write-all
 
@@ -84,7 +84,7 @@ jobs:
 
  tar_cleanup:
  name: Clean up Github caches with tar archives
- if: (github.event_name == 'workflow_dispatch' && inputs.cache_type == 'tar' )
+ if: (${{ ! github.event.repository.fork }} && github.event_name == 'workflow_dispatch' && inputs.cache_type == 'tar' )
  runs-on: ubuntu-latest
  permissions: write-all
 
@@ -101,7 +101,7 @@ jobs:
 
  branch_cleanup:
  name: Clean up branch specific caches
- if: (github.event_name == 'workflow_dispatch' && inputs.cache_type == 'branch' ) || (github.event_name == 'delete' && github.event.ref_type == 'branch')
+ if: (${{ ! github.event.repository.fork }} && ((github.event_name == 'workflow_dispatch' && inputs.cache_type == 'branch') || (github.event_name == 'delete' && github.event.ref_type == 'branch')))
  runs-on: ubuntu-latest
  permissions: write-all
 
@@ -138,7 +138,7 @@ jobs:
 
  pr_cleanup:
  name: Clean up PR related GitHub caches
- if: github.event_name == 'pull_request_target'
+ if: (${{ ! github.event.repository.fork }} && github.event_name == 'pull_request_target')
  runs-on: ubuntu-latest
  permissions: write-all
 

.github/workflows/clean_up.yml

@@ -22,7 +22,7 @@ name: Clean up
 jobs:
  bot_branches:
  name: Delete temporary bot/* branches
- if: github.event_name == 'workflow_dispatch' && inputs.delete_temp_branches
+ if: (${{ ! github.event.repository.fork }} && github.event_name == 'workflow_dispatch' && inputs.delete_temp_branches)
  runs-on: ubuntu-latest
 
  steps:
@@ -46,7 +46,7 @@ jobs:
 
  draft_releases:
  name: Delete draft release
- if: github.event_name == 'workflow_dispatch' && inputs.delete_draft_releases
+ if: (${{ ! github.event.repository.fork }} && github.event_name == 'workflow_dispatch' && inputs.delete_draft_releases)
  runs-on: ubuntu-latest
 
  steps:
@@ -67,6 +67,7 @@ jobs:
 
  ghcr_images:
  name: Clean up GHCR images
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
 
  strategy:
@@ -146,6 +147,7 @@ jobs:
  # See also https://github.com/actions/runner/issues/2120
  deployments:
  name: Deployments
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  permissions:
  deployments: write
@@ -177,7 +179,7 @@ jobs:
 
  pr_cleanup:
  name: Clean up documentation previews
- if: github.event_name == 'pull_request_target'
+ if: (${{ ! github.event.repository.fork }} && github.event_name == 'pull_request_target')
  runs-on: ubuntu-latest
 
  permissions:

.github/workflows/command_dispatch.yml

@@ -7,6 +7,7 @@ name: Slash command dispatch
 jobs:
  preprocessing:
  name: Check for slash command
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  permissions:
  # keep this limited to read permissions for the content only!

.github/workflows/create_cache_command.yml

@@ -15,6 +15,7 @@ name: Create CI cache
 jobs:
  pr_info:
  name: Determine PR info
+ if: ${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }}
  runs-on: ubuntu-latest
 
  outputs:

.github/workflows/delete_tags.yml

@@ -15,6 +15,7 @@ name: Delete tags
 jobs:
  ghcr_images:
  name: Clean up GHCR image tags
+ if: ${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }}
  runs-on: ubuntu-latest
 
  steps:

.github/workflows/deployments.yml

@@ -52,7 +52,7 @@ concurrency:
 jobs:
  metadata:
  name: Prepare build
- if: github.event_name != 'push' || github.event.created
+ if: (${{ ! github.event.repository.fork }} && (github.event_name != 'push' || github.event.created))
  runs-on: ubuntu-latest
  permissions:
  contents: read

.github/workflows/dev_environment.yml

@@ -84,6 +84,7 @@ name: CUDA Quantum cached dev images
 jobs:
  metadata:
  name: Metadata
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  permissions:
  contents: read

.github/workflows/docker_images.yml

@@ -37,6 +37,7 @@ name: Docker images
 jobs:
  metadata:
  name: Metadata
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  permissions: {}
 

.github/workflows/documentation.yml

@@ -26,7 +26,7 @@ jobs:
  publish_docs:
  name: Publish documentation
  runs-on: ubuntu-latest
- if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.name == 'CI' || (github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.actor.id == '135836288')
+ if: (${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }} && (github.event_name == 'workflow_dispatch' || github.event.workflow_run.name == 'CI' || (github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.actor.id == '135836288')))
 
  permissions:
  contents: write

.github/workflows/gh_registry.yml

@@ -8,7 +8,7 @@ name: Update GHCR
 jobs:
  ghcr_config:
  name: Read GHCR config
- if: github.event_name == 'workflow_dispatch' || vars.enabled_workflows == 'all'
+ if: (${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }} && (github.event_name == 'workflow_dispatch' || vars.enabled_workflows == 'all'))
  runs-on: ubuntu-latest
  permissions:
  contents: read

.github/workflows/help_command.yml

@@ -6,7 +6,7 @@ name: Show the slash commands help
 
 jobs:
  example:
- if: ${{ github.event.client_payload.github.job == 'command_dispatch' }}
+ if: (${{ ! github.event.repository.fork }} && ${{ github.event.client_payload.github.job == 'command_dispatch' }})
  runs-on: ubuntu-latest
  steps:
  - name: Checkout repository

.github/workflows/integration_tests.yml

@@ -80,6 +80,7 @@ jobs:
  # `env` context is unavailable outside of "steps" contexts.
  setup:
  name: Set variables
+ if: ${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  outputs:
  cudaq_test_image: ${{ steps.vars.outputs.cudaq_test_image }}

.github/workflows/nvqc_regression_tests.yml

@@ -47,6 +47,7 @@ jobs:
  # `env` context is unavailable outside of "steps" contexts.
  setup:
  name: Set variables
+ if: ${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  outputs:
  cudaq_test_image: ${{ steps.vars.outputs.cudaq_test_image }}

.github/workflows/prebuilt_binaries.yml

@@ -31,6 +31,7 @@ name: Pre-built binaries
 jobs:
  build_installer:
  name: Build CUDA Quantum assets
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ${{ (contains(inputs.platform, 'arm') && 'linux-arm64-cpu8') || 'linux-amd64-cpu8' }}
  permissions:
  contents: read
@@ -190,6 +191,7 @@ jobs:
 
  build_openmpi:
  name: Minimal OpenMPI installation
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ${{ (contains(inputs.platform, 'arm') && 'linux-arm64-cpu8') || 'linux-amd64-cpu8' }}
  permissions:
  contents: read
@@ -248,6 +250,7 @@ jobs:
 
  create_test_config:
  name: Prepare validation
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  permissions:
  contents: read

.github/workflows/prepare_deployment.yml

@@ -14,7 +14,7 @@ jobs:
  pr_info:
  name: Store PR info
  runs-on: ubuntu-latest
- if: github.event.pull_request.merged == true
+ if: (${{ ! github.event.repository.fork }} && github.event.pull_request.merged == true)
  permissions: {}
 
  steps:

.github/workflows/publishing.yml

@@ -32,7 +32,7 @@ name: Publishing
 jobs:
  assets:
  name: Assets
- if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success'
+ if: (${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }} && (github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success'))
  runs-on: ubuntu-latest
  permissions:
  contents: read

.github/workflows/publishing_stable.yml

@@ -16,6 +16,7 @@ name: Push stable release
 jobs:
  ngc_quantum:
  name: Publish to stable
+ if: ${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  permissions:
  contents: read

.github/workflows/python_wheels.yml

@@ -33,6 +33,7 @@ name: Python wheels
 jobs:
  build_wheel:
  name: Build Python ${{ inputs.python_version }} wheel
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ${{ (contains(inputs.platform, 'arm') && 'linux-arm64-cpu8') || 'linux-amd64-cpu8' }}
  permissions:
  contents: read
@@ -136,6 +137,7 @@ jobs:
 
  create_test_config:
  name: Prepare validation
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  permissions:
  contents: read

.github/workflows/repo_checks.yml

@@ -12,6 +12,7 @@ jobs:
  links:
  runs-on: ubuntu-latest
  name: "Check links"
+ if: ${{ github.event_name == 'workflow_dispatch' || ! github.event.repository.fork }}
  steps:
  - name: Checkout repository
  uses: actions/checkout@v4
@@ -29,6 +30,7 @@ jobs:
 
  license_headers:
  name: Check license headers
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
  steps:
  - uses: actions/checkout@v4
@@ -39,6 +41,7 @@ jobs:
 
  filters:
  name: Filter files to check
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ubuntu-latest
 
  outputs:

.github/workflows/show_context_command.yml

@@ -6,7 +6,7 @@ name: Show the context available to slash commands
 
 jobs:
  example:
- if: ${{ github.event.client_payload.github.job == 'command_dispatch' }}
+ if: (${{ ! github.event.repository.fork }} && ${{ github.event.client_payload.github.job == 'command_dispatch' }})
  runs-on: ubuntu-latest
  steps:
  - name: Show context

.github/workflows/test_in_devenv.yml

@@ -27,6 +27,7 @@ name: Run CI within the dev environment container
 jobs:
  build_and_test:
  name: Dev environment (Debug)
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ${{ (contains(inputs.platform, 'arm') && 'linux-arm64-cpu8') || 'linux-amd64-cpu8' }}
  permissions:
  contents: read
@@ -149,6 +150,7 @@ jobs:
 
  build_and_test_python:
  name: Dev environment (Python)
+ if: ${{ ! github.event.repository.fork }}
  runs-on: ${{ (contains(inputs.platform, 'arm') && 'linux-arm64-cpu8') || 'linux-amd64-cpu8' }}
  permissions:
  contents: read