ci: prevent workflows execution on forks and allow workflow_dispatch for docker-build (#147)

Author: jbern0rd

.github/workflows/conventional-commits.yaml

@@ -9,6 +9,8 @@ on:
 
 jobs:
   lint-pr-title:
+    # Prevent execution on forks
+    if: github.repository_owner == 'iExecBlockchainComputing'
     permissions:
       pull-requests: read
     uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/conventional-commits.yml@conventional-commits-v1.1.0

.github/workflows/docker-build.yaml

@@ -6,11 +6,15 @@ on:
     branches: [main]
     tags:
       - 'v*.*.*'
+  # can only be executed by people with write access on repository
+  workflow_dispatch:
 
 jobs:
   prepare:
     name: Determine image tag
     runs-on: ubuntu-latest
+    # Prevent execution on forks
+    if: github.repository_owner == 'iExecBlockchainComputing'
     outputs:
       image_tag: ${{ steps.determine-tag.outputs.image_tag }}
     steps:

.github/workflows/release-please.yaml

@@ -12,5 +12,7 @@ permissions:
 
 jobs:
   release-please:
+    # Prevent execution on forks
+    if: github.repository_owner == 'iExecBlockchainComputing'
     uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/release-please.yml@release-please-v2.0.0
     secrets: inherit