Make CI workflows fork-friendly (#19807)

* Make some CI conditional for forks

Signed-off-by: wallentx <[email protected]>

* fix conditional for build installers

Signed-off-by: wallentx <[email protected]>

* fix macos ARM and Linux ARM onnpre-commit

Signed-off-by: wallentx <[email protected]>

* Testing SSH signing

* Remove conditional for checking signed commits

* Use macos-15 instead of macos-latest, and use public gh linux arm

* fix yaml array vs literal string

---------

Signed-off-by: wallentx <[email protected]>

Author: wallentx

.github/workflows/benchmarks.yml

@@ -47,7 +47,7 @@ jobs:
 
   build:
     name: Benchmarks
-    runs-on: benchmark
+    runs-on: ${{ github.repository_owner == 'Chia-Network' && 'benchmark' || 'ubuntu-latest' }}
     needs:
       - setup
     container:

.github/workflows/build-macos-installers.yml

@@ -57,7 +57,7 @@ jobs:
             name: intel
             bladebit-suffix: macos-x86-64.tar.gz
             arch-artifact-name: intel
-          - runs-on: macos-13-arm64
+          - runs-on: ${{ github.repository_owner == 'Chia-Network' && 'macos-13-arm64' || 'macos-15' }}
             name: m1
             bladebit-suffix: macos-arm64.tar.gz
             arch-artifact-name: arm

.github/workflows/check_wheel_availability.yaml

@@ -33,7 +33,7 @@ jobs:
             matrix: macos
             runs-on:
               intel: macos-13
-              arm: macos-13-arm64
+              arm: ${{ github.repository_owner == 'Chia-Network' && 'macos-13-arm64' || 'macos-15' }}
           - name: Windows
             matrix: windows
             runs-on:

.github/workflows/codeql-analysis.yml

@@ -29,6 +29,7 @@ concurrency:
 
 jobs:
   analyze:
+    if: github.repository_owner == 'Chia-Network'
     name: Analyze
     runs-on: ubuntu-latest
 

.github/workflows/dependency-review.yml

@@ -13,6 +13,7 @@ permissions:
 
 jobs:
   dependency-review:
+    if: github.repository_owner == 'Chia-Network'
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout Repository"

.github/workflows/pre-commit.yml

@@ -30,7 +30,7 @@ jobs:
             matrix: macos
             runs-on:
               intel: macos-13
-              arm: macos-13-arm64
+              arm: ${{ github.repository_owner == 'Chia-Network' && 'macos-13-arm64' || 'macos-15' }}
           - name: Windows
             matrix: windows
             runs-on:

.github/workflows/reflow-publish-installer.yml

@@ -27,6 +27,7 @@ permissions:
 
 jobs:
   publish:
+    if: github.repository_owner == 'Chia-Network'
     name: Publish ${{ matrix.arch.name }} ${{ matrix.mode.name }} ${{ matrix.os.file-type.name }}
     runs-on: ubuntu-latest
     timeout-minutes: 5

.github/workflows/require-labels.yml

@@ -4,6 +4,7 @@ on:
     types: [opened, labeled, unlabeled, synchronize]
 jobs:
   check-labels:
+    if: github.repository_owner == 'Chia-Network'
     runs-on: ubuntu-latest
     permissions:
       checks: write

.github/workflows/stale-issue.yml

@@ -5,6 +5,7 @@ on:
 
 jobs:
   stale:
+    if: github.repository_owner == 'Chia-Network'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/stale@v9

.github/workflows/start-release.yml

@@ -11,6 +11,7 @@ permissions:
 
 jobs:
   start_release:
+    if: github.repository_owner == 'Chia-Network'
     name: Starts release process in Glue API
     runs-on: [glue-notify]
     steps: