From 48cf43b2c46f154816fe7c4a135f9cd5a9bb7a98 Mon Sep 17 00:00:00 2001
From: Patrik Oldsberg <poldsberg@gmail.com>
Date: Tue, 22 Mar 2022 14:58:24 +0100
Subject: [PATCH] workflows/automate_changeset_feedback: avoid forks + comment
 on script download

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
---
 .github/workflows/automate_changeset_feedback.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/automate_changeset_feedback.yml b/.github/workflows/automate_changeset_feedback.yml
index 492ef976dd..468606709b 100644
--- a/.github/workflows/automate_changeset_feedback.yml
+++ b/.github/workflows/automate_changeset_feedback.yml
@@ -10,6 +10,7 @@ permissions:
 
 jobs:
   feedback:
+    if: github.repository == 'backstage/backstage' # prevent running on forks
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
@@ -19,6 +20,7 @@ jobs:
       - name: fetch base
         run: git fetch origin ${{ github.base_ref }}
 
+        # We avoid using the in-source script since this workflow has elevated permissions that we don't want to expose
       - name: Generate Feedback
         id: generate-feedback
         run: |