From 944ddecf1b9ef205b3b3287c56f56e44be7f26c4 Mon Sep 17 00:00:00 2001
From: Hilmar Falkenberg <hilmar.falkenberg@sap.com>
Date: Wed, 21 Feb 2024 10:23:57 +0100
Subject: [PATCH] let's run only, where we have API key available (#667)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Description

mend scans on forks are never successful
e.g.
https://github.com/hilmarf/ocm/actions/runs/7945515639/job/21692267352
`-apiKey $API_KEY` is of course missing

So maybe we should consider NOT to trigger scan from forks?

## What type of PR is this? (check all applicable)

- [ ] 🍕 Feature
- [ ] 🐛 Bug Fix
- [ ] 📝 Documentation Update
- [ ] 🎨 Style
- [ ] 🧑‍💻 Code Refactor
- [ ] 🔥 Performance Improvements
- [ ] ✅ Test
- [x] 🤖 Build
- [x] 🔁 CI
- [ ] 📦 Chore (Release)
- [ ] ⏩ Revert

## Related Tickets & Documents

<!--
Please use this format link issue numbers: Fixes #123

https://docs.github.com/en/free-pro-team@latest/github/managing-your-work-on-github/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword
-->
- Related Issue # (issue)
- Closes # (issue)
- Fixes # (issue)
> Remove if not applicable

## Screenshots

<!-- Visual changes require screenshots -->


## Added tests?

- [ ] 👍 yes
- [ ] 🙅 no, because they aren't needed
- [ ] 🙋 no, because I need help
- [ ] Separate ticket for tests # (issue/pr)

Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration


## Added to documentation?

- [ ] 📜 README.md
- [ ] 🙅 no documentation needed

## Checklist:

- [ ] My code follows the style guidelines of this project
- [ ] I have performed a self-review of my code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] I have made corresponding changes to the documentation
- [ ] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [ ] New and existing unit tests pass locally with my changes
- [ ] Any dependent changes have been merged and published in downstream
modules

Co-authored-by: Gerald Morrison <67469729+morri-son@users.noreply.github.com>
---
 .github/workflows/mend_scan.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/mend_scan.yaml b/.github/workflows/mend_scan.yaml
index 36868807ab..9102174fc4 100644
--- a/.github/workflows/mend_scan.yaml
+++ b/.github/workflows/mend_scan.yaml
@@ -25,6 +25,7 @@ on:
         - debug
 jobs:
   mend-scan:
+    if: github.repository == 'open-component-model/ocm'
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write