fix: Restore repository CI

.github/workflows/cla.yml

@@ -14,6 +14,8 @@ permissions:
 
 jobs:
   CLAAssistant:
+    # The CI bot credentials and protected signature branch only exist upstream.
+    if: ${{ github.repository == 'vendurehq/vendure' }}
     runs-on: ubuntu-latest
     steps:
       - name: Generate CI Bot Token

.github/workflows/deploy_dashboard.yml

@@ -30,6 +30,8 @@ concurrency:
 
 jobs:
     deploy:
+        # Preview deployment credentials are only configured in the upstream repository.
+        if: ${{ github.repository == 'vendurehq/vendure' }}
         runs-on: ubuntu-latest
         permissions:
             contents: read

.github/workflows/docs_ci.yml

@@ -51,8 +51,8 @@ jobs:
 
     generate-manifest:
         name: Generate & commit manifest
-        # Skip fork PRs (can't push back to fork branches) and draft PRs
-        if: ${{ github.event_name == 'push' || (!github.event.pull_request.head.repo.fork && !github.event.pull_request.draft) }}
+        # The CI bot credentials only exist upstream. Also skip fork and draft PRs.
+        if: ${{ github.repository == 'vendurehq/vendure' && (github.event_name == 'push' || (!github.event.pull_request.head.repo.fork && !github.event.pull_request.draft)) }}
         runs-on: ubuntu-latest
         permissions:
             contents: write

.github/workflows/generate_docs.yml

@@ -18,8 +18,8 @@ concurrency:
 jobs:
     generate:
         name: Generate & commit docs
-        # Skip fork PRs (can't push back to fork branches) and draft PRs
-        if: ${{ !github.event.pull_request.head.repo.fork && !github.event.pull_request.draft }}
+        # The CI bot credentials only exist upstream. Also skip fork and draft PRs.
+        if: ${{ github.repository == 'vendurehq/vendure' && !github.event.pull_request.head.repo.fork && !github.event.pull_request.draft }}
         runs-on: ubuntu-latest
         permissions:
             contents: write