Disable all GitHub Actions jobs in forks (#7326)

* Disable all GitHub Actions jobs in forks

Avoid spending users GHA resources on our CI jobs in GitHub forks.
Downstream Cirq forks can remove the if-guard should they desire
to execute workflows.

Ref: https://github.com/orgs/community/discussions/26704

* Guard GitHub Actions execution by repository_owner

Author: pavoljuhas

.github/workflows/ci-daily.yml

@@ -14,6 +14,7 @@ permissions: read-all
 
 jobs:
   pytest:
+    if: github.repository_owner == 'quantumlib'
     name: Pytest Ubuntu
     strategy:
       matrix:
@@ -50,6 +51,7 @@ jobs:
       - name: Stop Quil dependencies
         run: docker compose -f cirq-rigetti/docker-compose.test.yaml down
   windows:
+    if: github.repository_owner == 'quantumlib'
     name: Pytest Windows
     strategy:
       matrix:
@@ -77,6 +79,7 @@ jobs:
         run: check/pytest -n auto --ignore=cirq-core/cirq/contrib --enable-slow-tests
         shell: bash
   macos:
+    if: github.repository_owner == 'quantumlib'
     name: Pytest MacOS
     strategy:
       matrix:

.github/workflows/ci-weekly.yml

@@ -14,6 +14,7 @@ permissions: read-all
 
 jobs:
   notebooks-stable:
+    if: github.repository_owner == 'quantumlib'
     name: All Notebooks Isolated Test against Cirq stable
     env:
       NOTEBOOK_PARTITIONS: 4

.github/workflows/ci.yml

@@ -20,6 +20,7 @@ permissions: read-all
 
 jobs:
   quick_test:
+    if: github.repository_owner == 'quantumlib'
     name: Misc check
     runs-on: ubuntu-22.04
     steps:
@@ -33,6 +34,7 @@ jobs:
       - name: Misc
         run: check/misc
   packaging_test:
+    if: github.repository_owner == 'quantumlib'
     name: Packaging test
     runs-on: ubuntu-22.04
     steps:
@@ -48,6 +50,7 @@ jobs:
       - name: Run packaging test
         run: ./dev_tools/packaging/packaging_test.sh
   format:
+    if: github.repository_owner == 'quantumlib'
     name: Format check
     runs-on: ubuntu-22.04
     steps:
@@ -65,6 +68,7 @@ jobs:
       - name: Format
         run: check/format-incremental
   mypy:
+    if: github.repository_owner == 'quantumlib'
     name: Type check
     runs-on: ubuntu-22.04
     steps:
@@ -80,6 +84,7 @@ jobs:
       - name: Type check
         run: check/mypy
   changed_files:
+    if: github.repository_owner == 'quantumlib'
     name: Changed files test
     runs-on: ubuntu-22.04
     steps:
@@ -97,6 +102,7 @@ jobs:
       - name: Changed files test
         run: check/pytest-changed-files -n auto
   lint:
+    if: github.repository_owner == 'quantumlib'
     name: Lint check
     runs-on: ubuntu-22.04
     steps:
@@ -114,6 +120,7 @@ jobs:
       - name: Lint
         run: check/pylint -v
   doc_test:
+    if: github.repository_owner == 'quantumlib'
     name: Doc test
     runs-on: ubuntu-22.04
     steps:
@@ -129,6 +136,7 @@ jobs:
       - name: Doc check
         run: check/doctest -q
   nbformat:
+    if: github.repository_owner == 'quantumlib'
     name: Notebook formatting
     runs-on: ubuntu-22.04
     steps:
@@ -144,6 +152,7 @@ jobs:
       - name: Doc check
         run: check/nbformat
   shellcheck:
+    if: github.repository_owner == 'quantumlib'
     name: Shell check
     runs-on: ubuntu-22.04
     steps:
@@ -154,6 +163,7 @@ jobs:
       - name: Run shellcheck
         run: check/shellcheck
   isolated-modules:
+    if: github.repository_owner == 'quantumlib'
     name: Isolated pytest Ubuntu
     runs-on: ubuntu-22.04
     steps:
@@ -169,6 +179,7 @@ jobs:
       - name: Test each module in isolation
         run: pytest -n auto --enable-slow-tests dev_tools/packaging/isolated_packages_test.py
   pytest:
+    if: github.repository_owner == 'quantumlib'
     name: Pytest Ubuntu
     strategy:
       matrix:
@@ -202,6 +213,7 @@ jobs:
         run: docker compose -f cirq-rigetti/docker-compose.test.yaml down
   # TODO(#6706) remove after we start using NumPy 2.0 in regular pytest
   pytest-numpy-2:
+    if: github.repository_owner == 'quantumlib'
     name: Pytest Ubuntu with NumPy-2
     strategy:
       matrix:
@@ -230,6 +242,7 @@ jobs:
       - name: Pytest check
         run: check/pytest -n auto --durations=20 --ignore=cirq-rigetti
   pip-compile:
+    if: github.repository_owner == 'quantumlib'
     name: Check consistency of requirements
     runs-on: ubuntu-22.04
     steps:
@@ -246,6 +259,7 @@ jobs:
         run: |
           pip-compile --resolver=backtracking dev_tools/requirements/deps/cirq-all.txt -o-
   build_protos:
+    if: github.repository_owner == 'quantumlib'
     name: Build protos
     runs-on: ubuntu-22.04
     steps:
@@ -264,6 +278,7 @@ jobs:
       - name: Build protos
         run: check/protos-up-to-date
   coverage:
+    if: github.repository_owner == 'quantumlib'
     name: Coverage check
     runs-on: ubuntu-22.04
     steps:
@@ -299,6 +314,7 @@ jobs:
       - name: Stop Quil dependencies
         run: docker compose -f cirq-rigetti/docker-compose.test.yaml down
   windows:
+    if: github.repository_owner == 'quantumlib'
     name: Pytest Windows
     strategy:
       matrix:
@@ -326,6 +342,7 @@ jobs:
           check/pytest -n auto --durations=20 --ignore=cirq-core/cirq/contrib
         shell: bash
   macos:
+    if: github.repository_owner == 'quantumlib'
     name: Pytest MacOS
     strategy:
       matrix:
@@ -350,6 +367,7 @@ jobs:
       - name: Pytest check
         run: check/pytest -n auto --durations=20 --ignore=cirq-core/cirq/contrib
   notebooks-stable:
+    if: github.repository_owner == 'quantumlib'
     name: Changed Notebooks Isolated Test against Cirq stable
     env:
       NOTEBOOK_PARTITIONS: 4
@@ -379,6 +397,7 @@ jobs:
           name: notebook-outputs
           path: out
   notebooks-branch:
+    if: github.repository_owner == 'quantumlib'
     name: Notebook Tests against PR
     runs-on: ubuntu-22.04
     steps:
@@ -400,6 +419,7 @@ jobs:
           name: notebook-outputs
           path: out
   ts-build:
+    if: github.repository_owner == 'quantumlib'
     name: Bundle file consistency
     runs-on: ubuntu-22.04
     steps:
@@ -414,6 +434,7 @@ jobs:
       - name: Check build matches the current
         run: check/ts-build-current
   ts-lint:
+    if: github.repository_owner == 'quantumlib'
     name: Typescript lint check
     runs-on: ubuntu-22.04
     steps:
@@ -428,6 +449,7 @@ jobs:
       - name: Lint Typescript files
         run: check/ts-lint
   ts-test:
+    if: github.repository_owner == 'quantumlib'
     name: Typescript tests
     runs-on: ubuntu-22.04
     steps:
@@ -444,6 +466,7 @@ jobs:
       - name: Run end-to-end tests
         run: check/ts-test-e2e
   ts-coverage:
+    if: github.repository_owner == 'quantumlib'
     name: Typescript tests coverage
     runs-on: ubuntu-22.04
     steps:

.github/workflows/ossf-scorecard.yaml

@@ -29,6 +29,7 @@ concurrency:
 
 jobs:
   scorecard:
+    if: github.repository_owner == 'quantumlib'
     name: Perform Scorecard analysis
     runs-on: ubuntu-22.04
     timeout-minutes: 10

.github/workflows/pr-labeler.yaml

@@ -49,6 +49,7 @@ permissions: read-all
 
 jobs:
   label-pr-size:
+    if: github.repository_owner == 'quantumlib'
     name: Update PR size labels
     runs-on: ubuntu-24.04
     timeout-minutes: 5

.github/workflows/stale.yml

@@ -61,6 +61,7 @@ permissions: read-all
 
 jobs:
   stale:
+    if: github.repository_owner == 'quantumlib'
     name: Label and/or close stale issues and PRs
     runs-on: ubuntu-22.04
     timeout-minutes: 10