[ci] restrict jobs from running on forks

Author: titusfortner

.github/workflows/ci-rbe.yml

@@ -10,6 +10,7 @@ on:
 jobs:
   format:
     name: Format
+    if: github.repository_owner == 'seleniumhq'
     uses: ./.github/workflows/bazel.yml
     with:
       name: Check format script run
@@ -19,6 +20,7 @@ jobs:
 
   test:
     name: Test
+    if: github.repository_owner == 'seleniumhq'
     uses: ./.github/workflows/bazel.yml
     with:
       # TODO: experiment with turning off caches

.github/workflows/ci-rust.yml

@@ -212,7 +212,7 @@ jobs:
     name: "Release Binaries"
     runs-on: ubuntu-latest
     needs: [macos-stable, linux-stable, windows-stable, macos-debug, linux-debug, windows-debug]
-    if: github.event_name != 'schedule'
+    if: github.event_name != 'schedule' && github.repository_owner == 'seleniumhq'
     steps:
       - name: "Checkout selenium_manager_artifacts"
         uses: actions/checkout@v4

.github/workflows/label-commenter.yml

@@ -11,6 +11,7 @@ permissions:
 
 jobs:
   comment:
+    if: github.repository_owner == 'seleniumhq'
     runs-on: ubuntu-20.04
     steps:
       - uses: actions/checkout@v4

.github/workflows/lock.yml

@@ -12,6 +12,7 @@ permissions:
 
 jobs:
   action:
+    if: github.repository_owner == 'seleniumhq'
     runs-on: ubuntu-latest
     steps:
       - uses: dessant/lock-threads@v5

.github/workflows/mirror-selenium-releases.yml

@@ -7,6 +7,7 @@ on:
 
 jobs:
   build:
+    if: github.repository_owner == 'seleniumhq'
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
@@ -24,7 +25,7 @@ jobs:
         export CHANGES=$(git status -s)
         if [ -n "$CHANGES" ]; then
           git config --local user.email "[email protected]"
-          git config --local user.name "Selenium CI Bot"        
+          git config --local user.name "Selenium CI Bot"
           git add common/mirror/selenium
           git commit -m "Update mirror info (`date`)" -a
           echo "::set-output name=commit::true"

.github/workflows/nightly.yml

@@ -21,7 +21,7 @@ on:
 
 jobs:
   ruby:
-    if: inputs.language == 'ruby' || github.event_name == 'schedule'
+    if: (github.repository_owner == 'seleniumhq') && (inputs.language == 'ruby' || github.event_name == 'schedule')
     name: Ruby
     uses: ./.github/workflows/bazel.yml
     strategy:
@@ -37,8 +37,9 @@ jobs:
         bazel run //rb:${{ matrix.gem }}-bump-nightly-version ${{ inputs.version }}
         bazel run //rb:${{ matrix.gem }}-release-nightly
 
+
   java:
-    if: inputs.language == 'java' || github.event_name == 'schedule'
+    if: (github.repository_owner == 'seleniumhq') && (inputs.language == 'java' || github.event_name == 'schedule')
     name: Java
     uses: ./.github/workflows/bazel.yml
     with:
@@ -49,7 +50,7 @@ jobs:
     secrets: inherit
 
   grid:
-    if: inputs.language == 'grid' || github.event_name == 'schedule'
+    if: (github.repository_owner == 'seleniumhq') && (inputs.language == 'grid' || github.event_name == 'schedule')
     name: Grid
     uses: ./.github/workflows/bazel.yml
     with:

.github/workflows/stale.yml

@@ -10,6 +10,7 @@ permissions:
 
 jobs:
   stale:
+    if: github.repository_owner == 'seleniumhq'
     permissions:
       issues: write  # for actions/stale to close stale issues
       pull-requests: write  # for actions/stale to close stale PRs