From 7055e28e0933ad8983f247b8060ebb7958d024b3 Mon Sep 17 00:00:00 2001
From: Prowler Bot <bot@prowler.com>
Date: Fri, 31 Oct 2025 11:48:03 +0100
Subject: [PATCH] chore(sdk): allow sdk checks only on prowler repository
 (#9119)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>
---
 .github/workflows/sdk-code-quality.yml     | 1 +
 .github/workflows/sdk-codeql.yml           | 5 +++--
 .github/workflows/sdk-container-checks.yml | 3 ++-
 .github/workflows/sdk-security.yml         | 1 +
 .github/workflows/sdk-tests.yml            | 1 +
 5 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/sdk-code-quality.yml b/.github/workflows/sdk-code-quality.yml
index fb7c13609b..943f456a4c 100644
--- a/.github/workflows/sdk-code-quality.yml
+++ b/.github/workflows/sdk-code-quality.yml
@@ -28,6 +28,7 @@ concurrency:
 
 jobs:
   sdk-code-quality:
+    if: github.repository == 'prowler-cloud/prowler'
     runs-on: ubuntu-latest
     timeout-minutes: 20
     permissions:
diff --git a/.github/workflows/sdk-codeql.yml b/.github/workflows/sdk-codeql.yml
index 302f73c0ca..09e4cc53fa 100644
--- a/.github/workflows/sdk-codeql.yml
+++ b/.github/workflows/sdk-codeql.yml
@@ -36,8 +36,9 @@ on:
     - cron: '00 12 * * *'
 
 jobs:
-  analyze:
-    name: Analyze
+  sdk-analyze:
+    if: github.repository == 'prowler-cloud/prowler'
+    name: CodeQL Security Analysis
     runs-on: ubuntu-latest
     permissions:
       actions: read
diff --git a/.github/workflows/sdk-container-checks.yml b/.github/workflows/sdk-container-checks.yml
index 49ea98fc33..5952d0c7c8 100644
--- a/.github/workflows/sdk-container-checks.yml
+++ b/.github/workflows/sdk-container-checks.yml
@@ -29,6 +29,7 @@ env:
 
 jobs:
   sdk-dockerfile-lint:
+    if: github.repository == 'prowler-cloud/prowler'
     runs-on: ubuntu-latest
     timeout-minutes: 10
     permissions:
@@ -100,7 +101,7 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Scan SDK container with Trivy
-        if: github.repository == 'prowler-cloud/prowler' && steps.check-changes.outputs.any_changed == 'true'
+        if: steps.check-changes.outputs.any_changed == 'true'
         uses: ./.github/actions/trivy-scan
         with:
           image-name: ${{ env.IMAGE_NAME }}
diff --git a/.github/workflows/sdk-security.yml b/.github/workflows/sdk-security.yml
index e5e8980f3f..c4fbf9a2a3 100644
--- a/.github/workflows/sdk-security.yml
+++ b/.github/workflows/sdk-security.yml
@@ -28,6 +28,7 @@ concurrency:
 
 jobs:
   sdk-security-scans:
+    if: github.repository == 'prowler-cloud/prowler'
     runs-on: ubuntu-latest
     timeout-minutes: 15
     permissions:
diff --git a/.github/workflows/sdk-tests.yml b/.github/workflows/sdk-tests.yml
index c8252bec02..5356bf857b 100644
--- a/.github/workflows/sdk-tests.yml
+++ b/.github/workflows/sdk-tests.yml
@@ -28,6 +28,7 @@ concurrency:
 
 jobs:
   sdk-tests:
+    if: github.repository == 'prowler-cloud/prowler'
     runs-on: ubuntu-latest
     timeout-minutes: 120
     permissions: