From bdc5bab19573ed6f28c3f316c99ee020a788193f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ruben=20H=C3=B6nle?= <Ruben.Hoenle@digits.schwarz>
Date: Wed, 6 May 2026 17:34:29 +0200
Subject: [PATCH] fix(ci-cd): don't run labeler on PRs from forks

instead use a cron schedule to label PRs from forks
---
 .github/workflows/labeler.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml
index 2b3d105d..5d5a2c2f 100644
--- a/.github/workflows/labeler.yaml
+++ b/.github/workflows/labeler.yaml
@@ -3,6 +3,9 @@ on:
   pull_request:
     types: [opened, synchronize]
   workflow_dispatch:
+  schedule:
+    # run every full hour (to still label PRs from forks)
+    - cron: '0 * * * *'
 
 jobs:
   labeler:
@@ -10,6 +13,8 @@ jobs:
       contents: read
       pull-requests: write
       issues: write
+    # don't run on PRs from forks (token has no write permissions)
+    if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
     name: "Labeler"
     runs-on: ubuntu-latest
     steps: