From aff7c0f701e788a9f969b5c78525a3f311edbf99 Mon Sep 17 00:00:00 2001
From: Steven Welch <steven@makeitwork.cloud>
Date: Thu, 27 Aug 2026 20:48:52 -0600
Subject: [PATCH] security(ci): skip fork OpenTofu workflows

---
 .github/workflows/opentofu.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/opentofu.yml b/.github/workflows/opentofu.yml
index c329264..5d94503 100644
--- a/.github/workflows/opentofu.yml
+++ b/.github/workflows/opentofu.yml
@@ -15,4 +15,7 @@ permissions:
 
 jobs:
   opentofu:
+    if: >-
+      github.event_name != 'pull_request' ||
+      github.event.pull_request.head.repo.full_name == github.repository
     uses: makeitworkcloud/shared-workflows/.github/workflows/opentofu.yml@main