Restrict GitHub workflows to microsoft/aspire

.github/workflows/analyze-ci-failure.md

@@ -24,7 +24,7 @@ jobs:
   collect-data:
     runs-on: ubuntu-latest
     if: >-
-      github.repository_owner == 'microsoft'
+      github.repository == 'microsoft/aspire'
       && (
         github.event_name == 'workflow_dispatch'
         || (

.github/workflows/auto-rerun-outerloop-failures.yml

@@ -31,7 +31,7 @@ jobs:
     # them would mask genuine breakage in exactly the PRs that change outerloop CI.
     if: >-
       ${{
-          github.repository_owner == 'microsoft' &&
+          github.repository == 'microsoft/aspire' &&
           github.event.workflow_run.event != 'pull_request' &&
           github.event.workflow_run.conclusion == 'failure' &&
           github.event.workflow_run.run_attempt <= 3

.github/workflows/auto-rerun-transient-ci-failures.yml

@@ -31,7 +31,7 @@ jobs:
     name: Analyze transient CI failures
     if: >-
       ${{
-          github.repository_owner == 'microsoft' &&
+          github.repository == 'microsoft/aspire' &&
           (github.event_name == 'workflow_dispatch' ||
            (github.event.workflow_run.event == 'pull_request' &&
             github.event.workflow_run.conclusion == 'failure' &&

.github/workflows/backmerge-release.yml

@@ -14,7 +14,7 @@ jobs:
   backmerge:
     runs-on: ubuntu-latest
     timeout-minutes: 15
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
 
     steps:
       - name: Generate GitHub App Token

.github/workflows/backport.yml

@@ -20,7 +20,7 @@ jobs:
   cleanup:
     if: >-
       github.event_name == 'schedule' &&
-      contains(fromJSON('["dotnet", "microsoft"]'), github.repository_owner)
+      github.repository == 'microsoft/aspire'
     runs-on: ubuntu-latest
     permissions:
       actions: write
@@ -62,7 +62,7 @@ jobs:
   backport:
     if: >-
       github.event_name == 'issue_comment' &&
-      contains(fromJSON('["dotnet", "microsoft"]'), github.repository_owner) &&
+      github.repository == 'microsoft/aspire' &&
       github.event.issue.pull_request != '' &&
       contains(github.event.comment.body, '/backport to')
     runs-on: ubuntu-latest

.github/workflows/build-cli-e2e-image.yml

@@ -30,6 +30,7 @@ env:
 jobs:
   build:
     name: Build CLI E2E Docker image
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: ${{ github.repository_owner == 'microsoft' && '8-core-ubuntu-latest' || 'ubuntu-latest' }}
     timeout-minutes: 45
 

.github/workflows/build-cli-native-archives.yml

@@ -31,6 +31,7 @@ jobs:
 
   build_cli_archives:
     name: Build CLI (${{ matrix.targets.rids }})
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: ${{ matrix.targets.runner }}
     strategy:
       matrix:

.github/workflows/build-packages.yml

@@ -10,6 +10,7 @@ on:
 jobs:
   build_packages:
     name: Build packages
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: 8-core-ubuntu-latest
     steps:
       - name: Checkout code

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
   actionlint:
     name: Lint handwritten workflows
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -54,7 +54,7 @@ jobs:
   prepare_for_ci:
     runs-on: ubuntu-latest
     name: Prepare for CI
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     outputs:
       skip_workflow: ${{ (steps.check_for_changes.outputs.no_changes == 'true' || steps.check_for_changes.outputs.only_changed == 'true') && 'true' || 'false' }}
       VERSION_SUFFIX_OVERRIDE: ${{ steps.compute_version_suffix.outputs.VERSION_SUFFIX_OVERRIDE }}
@@ -114,7 +114,7 @@ jobs:
       contents: read
       issues: write
       pull-requests: write
-    if: ${{ github.repository_owner == 'microsoft' && needs.prepare_for_ci.outputs.skip_workflow != 'true' }}
+    if: ${{ github.repository == 'microsoft/aspire' && needs.prepare_for_ci.outputs.skip_workflow != 'true' }}
     with:
       versionOverrideArg: ${{ needs.prepare_for_ci.outputs.VERSION_SUFFIX_OVERRIDE }}
       extensionVersionOverride: ${{ needs.prepare_for_ci.outputs.EXTENSION_VERSION_OVERRIDE }}
@@ -143,7 +143,7 @@ jobs:
     name: Stabilization Check
     runs-on: 8-core-ubuntu-latest
     needs: [prepare_for_ci]
-    if: ${{ github.repository_owner == 'microsoft' && needs.prepare_for_ci.outputs.skip_workflow != 'true' && github.event_name == 'pull_request' && needs.prepare_for_ci.outputs.STABILIZATION_ENABLED == 'true' }}
+    if: ${{ github.repository == 'microsoft/aspire' && needs.prepare_for_ci.outputs.skip_workflow != 'true' && github.event_name == 'pull_request' && needs.prepare_for_ci.outputs.STABILIZATION_ENABLED == 'true' }}
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -205,7 +205,7 @@ jobs:
 
   # This job is used for branch protection. It fails if any of the dependent jobs failed
   results:
-    if: ${{ always() && github.repository_owner == 'microsoft' }}
+    if: ${{ always() && github.repository == 'microsoft/aspire' }}
     runs-on: ubuntu-latest
     name: Final Results
     needs: [actionlint, prepare_for_ci, tests, stabilization_check]
@@ -244,7 +244,7 @@ jobs:
   ci_failure_tracker:
     name: Track CI Failure
     needs: [actionlint, prepare_for_ci, tests, stabilization_check]
-    if: ${{ always() && github.event_name == 'push' && github.repository_owner == 'microsoft' }}
+    if: ${{ always() && github.event_name == 'push' && github.repository == 'microsoft/aspire' }}
     runs-on: ubuntu-latest
     permissions:
       contents: read   # checkout to require the local .js modules

.github/workflows/cli-starter-validation.yml

@@ -32,6 +32,7 @@ permissions:
 jobs:
   validate:
     name: Validate
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: ${{ inputs.runner }}
     # Shared budget for every caller of this reusable workflow. The validation script can spend
     # up to four startup waits (run + start for two templates) and three resource waits, which is

.github/workflows/copilot-setup-steps.yml

@@ -14,6 +14,7 @@ on:
 jobs:
   # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
   copilot-setup-steps:
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: ${{ github.repository_owner == 'microsoft' && '8-core-ubuntu-latest' || 'ubuntu-latest' }}
 
     permissions:

.github/workflows/deployment-cleanup.yml

@@ -39,7 +39,7 @@ jobs:
   cleanup:
     name: Cleanup Azure Resources
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     environment: deployment-testing
 
     steps:

.github/workflows/deployment-test-command.yml

@@ -23,7 +23,7 @@ jobs:
       ${{
         startsWith(github.event.comment.body, '/deployment-test') &&
         github.event.issue.pull_request &&
-        github.repository_owner == 'microsoft'
+        github.repository == 'microsoft/aspire'
       }}
     runs-on: ubuntu-latest
 

.github/workflows/deployment-tests.yml

@@ -40,7 +40,7 @@ jobs:
   notify-start:
     name: Notify PR
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' && inputs.pr_number != '' }}
+    if: ${{ github.repository == 'microsoft/aspire' && inputs.pr_number != '' }}
     permissions:
       pull-requests: write
     steps:
@@ -67,7 +67,7 @@ jobs:
   enumerate:
     name: Enumerate Tests
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     permissions:
       contents: read
     outputs:
@@ -114,7 +114,7 @@ jobs:
   build:
     name: Build
     runs-on: 8-core-ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     permissions:
       contents: read
     steps:
@@ -641,7 +641,7 @@ jobs:
     name: Create Issue on Failure
     needs: [deploy-test]
     runs-on: ubuntu-latest
-    if: ${{ failure() && github.event_name == 'schedule' && github.repository_owner == 'microsoft' }}
+    if: ${{ failure() && github.event_name == 'schedule' && github.repository == 'microsoft/aspire' }}
     permissions:
       contents: read   # checkout to require the local .js modules
       issues: write

.github/workflows/dogfood-comment.yml

@@ -20,7 +20,7 @@ on:
 jobs:
   add-dogfood-comment:
     # Only run on the dotnet org to avoid running on forks
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write

.github/workflows/extension-changelog-finalized.yml

@@ -13,6 +13,7 @@ permissions:
 jobs:
   extension_changelog_finalized:
     name: Extension changelog finalized
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code

.github/workflows/extension-e2e-tests.yml

@@ -5,6 +5,7 @@ on:
 
 jobs:
   verify_extester_feed:
+    if: ${{ github.repository == 'microsoft/aspire' }}
     name: Verify ExTester internal feed availability
     runs-on: ubuntu-latest
     env:
@@ -72,6 +73,7 @@ jobs:
         run: node scripts/run-e2e.js --verify-extester-feed
 
   extension_e2e:
+    if: ${{ github.repository == 'microsoft/aspire' }}
     name: VS Code extension E2E (${{ matrix.name }}, ${{ matrix.shardName }})
     needs: verify_extester_feed
     runs-on: ${{ matrix.runner }}

.github/workflows/extension-unit-tests.yml

@@ -18,6 +18,7 @@ permissions:
 jobs:
   extension_tests_win:
     name: Run VS Code extension unit tests (Windows)
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: windows-latest
     env:
       NPM_REGISTRY: https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public-npm/npm/registry/

.github/workflows/generate-api-diffs.yml

@@ -18,7 +18,7 @@ permissions:
 jobs:
   generate-and-pr:
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     strategy:
       fail-fast: false
       matrix:

.github/workflows/generate-ats-diffs.yml

@@ -18,7 +18,7 @@ permissions:
 jobs:
   generate-and-pr:
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     strategy:
       fail-fast: false
       matrix:

.github/workflows/locker.yml

@@ -20,7 +20,7 @@ permissions:
 jobs:
   main:
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     steps:
       - name: Checkout Actions
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

.github/workflows/markdownlint.yml

@@ -12,7 +12,7 @@ jobs:
   lint:
 
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
 
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

.github/workflows/milestone-changelog.md

@@ -54,6 +54,7 @@ on:
 
 jobs:
   fetch-data:
+    if: github.repository == 'microsoft/aspire'
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -318,7 +319,7 @@ jobs:
           name: changelog-data
           path: /tmp/gh-aw/
 
-if: github.repository_owner == 'microsoft' && needs.fetch-data.outputs.has-work == 'true'
+if: github.repository == 'microsoft/aspire' && needs.fetch-data.outputs.has-work == 'true'
 
 permissions:
   contents: read

.github/workflows/monitor-scheduled-workflows.yml

@@ -33,7 +33,7 @@ concurrency:
 jobs:
   monitor:
     runs-on: ubuntu-latest
-    if: ${{ github.repository_owner == 'microsoft' }}
+    if: ${{ github.repository == 'microsoft/aspire' }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:

.github/workflows/native-dashboard-validation.yml

@@ -21,6 +21,7 @@ permissions:
 jobs:
   validate:
     name: Validate
+    if: ${{ github.repository == 'microsoft/aspire' }}
     runs-on: ${{ inputs.runner }}
     timeout-minutes: 30
     steps: