ci: restrict workflows to run only on main repo

Prevent workflows from running on forks by adding repository
owner checks to workflows that publish artifacts or use self-hosted
runners.

- Add check to `push.yaml` to prevent image publishing on forks
- Add check to `release.yaml` to prevent release creation on forks
- Add check to `k8s-bm.yaml` to prevent self-hosted runner usage on
  forks
- Add check to `profiling.yaml` to prevent self-hosted runner usage on
  forks

This ensures fork contributors don't need to manually disable workflows
and prevents unnecessary runs on forks.

Signed-off-by: vprashar2929 <[email protected]>

Author: vprashar2929

.github/workflows/k8s-bm.yaml

@@ -31,7 +31,7 @@ jobs:
 
   build-and-deploy:
     needs: [check-changes]
-    if: needs.check-changes.outputs.changes == 'true'
+    if: needs.check-changes.outputs.changes == 'true' && github.repository_owner == 'sustainable-computing-io'
     runs-on: self-hosted
     steps:
       # NOTE: In case of self-hosted runners, tools like docker, make, kubectl etc. are installed at the time of setting up the runner.

.github/workflows/profiling.yaml

@@ -25,7 +25,7 @@ jobs:
 
   profiling:
     needs: check-changes
-    if: needs.check-changes.outputs.changes == 'true'
+    if: needs.check-changes.outputs.changes == 'true' && github.repository_owner == 'sustainable-computing-io'
     runs-on: self-hosted
     steps:
       # NOTE: In case of self-hosted runners, tools like docker, make, kubectl etc. are installed at the time of setting up the runner.

.github/workflows/push.yaml

@@ -15,6 +15,7 @@ jobs:
     uses: ./.github/workflows/scorecard.yml
 
   publish:
+    if: github.repository_owner == 'sustainable-computing-io'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout source

.github/workflows/release.yaml

@@ -7,6 +7,7 @@ on: # yamllint disable-line rule:truthy
 
 jobs:
   release:
+    if: github.repository_owner == 'sustainable-computing-io'
     permissions:
       contents: write