fix: Restrict scheduled workflows to upstream repository (#6948)

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: CommanderStorm <26258709+CommanderStorm@users.noreply.github.com>

.github/workflows/codeql-analysis.yml

@@ -10,6 +10,8 @@ on:
 
 jobs:
   analyze:
+    # Only run scheduled analysis on the original repository, not on forks
+    if: github.event_name != 'schedule' || github.repository == 'louislam/uptime-kuma'
     name: Analyze
     runs-on: ubuntu-latest
     timeout-minutes: 360
@@ -42,6 +44,8 @@ jobs:
         with:
           category: "/language:${{matrix.language}}"
   zizmor:
+    # Only run scheduled analysis on the original repository, not on forks
+    if: github.event_name != 'schedule' || github.repository == 'louislam/uptime-kuma'
     runs-on: ubuntu-latest
     permissions:
       security-events: write

.github/workflows/release-nightly.yml

@@ -10,6 +10,8 @@ permissions: {}
 
 jobs:
   release-nightly:
+    # Only run on the original repository, not on forks
+    if: github.repository == 'louislam/uptime-kuma'
     runs-on: ubuntu-latest
     timeout-minutes: 120
     permissions:

.github/workflows/stale-bot.yml

@@ -8,6 +8,8 @@ permissions: {}
 
 jobs:
   stale:
+    # Only run on the original repository, not on forks
+    if: github.repository == 'louislam/uptime-kuma'
     runs-on: ubuntu-latest
     permissions:
       actions: write