diff --git a/.github/workflows/automate_changeset_feedback.yml b/.github/workflows/automate_changeset_feedback.yml index 492ef976dd..468606709b 100644 --- a/.github/workflows/automate_changeset_feedback.yml +++ b/.github/workflows/automate_changeset_feedback.yml @@ -10,6 +10,7 @@ permissions: jobs: feedback: + if: github.repository == 'backstage/backstage' # prevent running on forks runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 @@ -19,6 +20,7 @@ jobs: - name: fetch base run: git fetch origin ${{ github.base_ref }} + # We avoid using the in-source script since this workflow has elevated permissions that we don't want to expose - name: Generate Feedback id: generate-feedback run: |