From 7a010ccb605ecc2bfd50a0ddabcc57e6633a0bb5 Mon Sep 17 00:00:00 2001
From: nicktrn <55853254+nicktrn@users.noreply.github.com>
Date: Mon, 27 Apr 2026 22:14:10 +0100
Subject: [PATCH] ci: skip privileged PR jobs on fork PRs

---
 .github/workflows/claude-md-audit.yml    | 4 +++-
 .github/workflows/helm-pr-prerelease.yml | 1 +
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/claude-md-audit.yml b/.github/workflows/claude-md-audit.yml
index ddba0180401..c03179d4dfd 100644
--- a/.github/workflows/claude-md-audit.yml
+++ b/.github/workflows/claude-md-audit.yml
@@ -16,7 +16,9 @@ concurrency:
 
 jobs:
   audit:
-    if: github.event.pull_request.draft == false
+    if: >-
+      github.event.pull_request.draft == false &&
+      github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: read
diff --git a/.github/workflows/helm-pr-prerelease.yml b/.github/workflows/helm-pr-prerelease.yml
index 8df045945e6..f5bbfebde8d 100644
--- a/.github/workflows/helm-pr-prerelease.yml
+++ b/.github/workflows/helm-pr-prerelease.yml
@@ -54,6 +54,7 @@ jobs:
 
   prerelease:
     needs: lint-and-test
+    if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: read