.github: exclude forks from privileged job runs

Exclude forks from executing "privileged" GHA jobs on our self-hosted runners. Updates tailscale/corp#43401 Signed-off-by: Patrick O'Doherty <[email protected]>
2026-07-20 21:23:07 +08:00 · 2026-06-12 15:16:13 -07:00
parent 7d18a06292
commit ee3cfa387c
1 changed files with 3 additions and 0 deletions
@@ -344,6 +344,9 @@ jobs:
  privileged:
    needs: gomod-cache
    runs-on: ubuntu-24.04
+    # This job runs fork-PR code inside a --privileged container, so restrict it
+    # to runs on the tailscale/tailscale repo and never on 3p PRs.
+    if: github.repository == 'tailscale/tailscale'
    container:
      image: golang:latest
      options: --privileged