Add conditional checks to prevent scheduled actions running inside forked repositories

.github/workflows/codeql.yml

@@ -9,7 +9,7 @@ on:
     types: [opened]
 jobs:
   analyze:
-    if: github.event.pull_request.draft == false
+    if: github.event.pull_request.draft == false && github.repository == 'zenml-io/zenml'
     name: Analyze
     runs-on: ubuntu-latest
     timeout-minutes: 360

.github/workflows/nightly_build.yml

@@ -13,18 +13,22 @@ jobs:
       python-version: '3.8'
       git-ref: develop
     secrets: inherit
+    if: github.repository == 'zenml-io/zenml'
   publish-python-package:
     needs: setup-and-test
     uses: ./.github/workflows/publish_to_pypi_nightly.yml
     secrets: inherit
+    if: github.repository == 'zenml-io/zenml'
   wait-for-package-release:
+    if: github.repository == 'zenml-io/zenml'
     runs-on: ubuntu-latest
     needs: publish-python-package
     steps:
       - name: Sleep for 4 minutes
         run: sleep 240
         shell: bash
   publish-docker-image:
+    if: github.repository == 'zenml-io/zenml'
     needs: wait-for-package-release
     uses: ./.github/workflows/publish_docker_image.yml
     with:

.github/workflows/pr_labeler.yml

@@ -7,6 +7,7 @@ on:
 name: pr-label
 jobs:
   pr-labeler:
+    if: github.repository == 'zenml-io/zenml'
     runs-on: ubuntu-latest
     env:
       ZENML_DEBUG: 1

.github/workflows/publish_api_docs.yml

@@ -6,6 +6,7 @@ on:
 jobs:
   publish:
     name: Build 🔨 and publish 📰 the api docs 📁 to gh-pages
+    if: github.repository == 'zenml-io/zenml'
     runs-on: ubuntu-latest
     env:
       ZENML_DEBUG: 1

.github/workflows/release.yml

@@ -62,6 +62,7 @@ jobs:
       - name: Test migrations across versions
         run: bash scripts/test-migrations-mariadb.sh
   publish-python-package:
+    if: github.repository == 'zenml-io/zenml'
     needs:
       - setup-and-test
       - mlstacks-compatibility-check
@@ -78,10 +79,12 @@ jobs:
         run: sleep 240
         shell: bash
   publish-docker-image:
+    if: github.repository == 'zenml-io/zenml'
     needs: wait-for-package-release
     uses: ./.github/workflows/publish_docker_image.yml
     secrets: inherit
   publish-helm-chart:
+    if: github.repository == 'zenml-io/zenml'
     needs: publish-docker-image
     uses: ./.github/workflows/publish_helm_chart.yml
     secrets: inherit

.github/workflows/replace_api_docs_version

@@ -8,6 +8,7 @@ on:
 jobs:
   update_docs:
     runs-on: ubuntu-latest
+    if: github.repository == 'zenml-io/zenml'
 
     steps:
     - name: Check out branch

.github/workflows/spellcheck.yml

@@ -15,7 +15,7 @@ concurrency:
   cancel-in-progress: true
 jobs:
   spellcheck:
-    if: github.event.pull_request.draft == false
+    if: github.event.pull_request.draft == false && github.repository == 'zenml-io/zenml'
     runs-on: ubuntu-dind-runners
     steps:
       - name: Checkout code

.github/workflows/templates-test.yml

@@ -42,7 +42,8 @@ jobs:
       ZENML_ANALYTICS_OPT_IN: false
       PYTHONIOENCODING: utf-8
       OBJC_DISABLE_INITIALIZE_FORK_SAFETY: 'YES'
-    if: ${{ ! startsWith(github.event.head_commit.message, 'GitBook:') }}
+    if: ${{ ! startsWith(github.event.head_commit.message, 'GitBook:') }} && github.repository
+      == 'zenml-io/zenml'
     defaults:
       run:
         shell: bash

.github/workflows/trivy-zenml-core.yml

@@ -8,6 +8,7 @@ on:
 jobs:
   trivy-scan:
     name: Trivy zenml scan & analysis
+    if: github.repository == 'zenml-io/zenml'
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout code

.github/workflows/trivy-zenserver.yml

@@ -8,6 +8,7 @@ on:
 jobs:
   trivy-scan:
     name: Trivy ZenServer scan & analysis
+    if: github.repository == 'zenml-io/zenml'
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout code

examples/quickstart/.copier-answers.yml

@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: 2023.12.18-3-g5b0d7c9
+_commit: 2024.01.12
 _src_path: gh:zenml-io/template-starter
 email: ''
 full_name: ZenML GmbH