From 45b757f4e7758276202f5ae8c1e4b4b0e3b8716b Mon Sep 17 00:00:00 2001
From: ElCruncharino <59633028+ElCruncharino@users.noreply.github.com>
Date: Sun, 5 Jul 2026 12:37:36 -0400
Subject: [PATCH] Skip the release build job on pull requests from forks

Fork PRs cannot access the keystore secrets, so the decoded
release.pfk is empty and assembleRelease always fails with a signing
error. The job now runs only on pushes and same-repo PRs, while
build-debug and the linter keep covering fork PRs.
---
 .github/workflows/build.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 5a424b5f8..6efda68a0 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -28,6 +28,9 @@ jobs:
         run: ./gradlew ktfmtCheck
   build:
     runs-on: ubuntu-latest
+    # skip on pull requests from forks: they cannot access the signing keystore
+    # secrets, so assembleRelease always fails there. build-debug still runs.
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     steps:
       - name: Checkout
         uses: actions/checkout@v6