Prevent Mend workflow in fork repos to be run

.github/workflows/gradle-snapshot.yml

@@ -4,8 +4,7 @@ on:
   workflow_call:
     inputs:
       project_name:
-        # format: <organisation>/<project_name>
-        description: "The project name to run the job. Prevent forks to run snapshot job"
+        description: "Name in <organisation>/<project_name> format. Prevents forks to run the job"
         required: true
         type: string
       java_version:

.github/workflows/maven-snapshot.yml

@@ -5,8 +5,7 @@ on:
     # Map the inputs that the caller needs to provide
     inputs:
       project_name:
-        # format: <organisation>/<project_name>
-        description: 'The project name to run the job. Prevent forks to run snapshot job'
+        description: 'Name in <organisation>/<project_name> format. Prevents forks to run the job'
         required: true
         type: string
       java_version:

.github/workflows/mend-ci.yml

@@ -3,6 +3,10 @@ name: Mend CLI scan
 on:
   workflow_call:
     inputs:
+      project_name:
+        description: "Name in <organisation>/<project_name> format. Prevents forks to run the job"
+        required: true
+        type: string
       SCA:
         required: true
         type: boolean
@@ -47,7 +51,8 @@ on:
         required: true
 
 jobs:
-  build-and-scan:
+  scan:
+    if: github.repository == inputs.project_name
     runs-on: ubuntu-latest
 
     env:

.github/workflows/sbt-snapshot.yml

@@ -4,8 +4,7 @@ on:
   workflow_call:
     inputs:
       project_name:
-        # format: <organisation>/<project_name>
-        description: "The project name to run the job. Prevent forks to run snapshot job"
+        description: "Name in <organisation>/<project_name> format. Prevents forks to run the job"
         required: true
         type: string
       fetch_all_commits:

README.md

@@ -122,6 +122,8 @@ Workflows run in the context of the PR from a fork do not have access to the sec
 
 To exclude paths from being scanned, specify `SCA_EXCLUDES` and/or `SAST_EXCLUDES` values, in the comma-separated paths format: `'dir1/**,dir2/file.txt'`.
 
+`project_name` **must** be set by the caller (format: <organisation>/<project_name>).
+
 <details>
 <summary>Example of push to main and cronjob usage</summary>
 
@@ -247,7 +249,7 @@ Workflow for deploying snapshot versions to Maven Central. Gated to the upstream
 - **Tasks**: Deploy our SNAPSHOT version of our project to Maven Central
   Optionally builds and pushes a Quarkus Jib image to Quay.io.
 - **Inputs**: The following inputs are available to be overridden
-  * project_name :  **Must** be set by te caller.
+  * project_name :  **Must** be set by the caller (format: <organisation>/<project_name>).
   * java_version (default: `21`)
   * snapshot_deploy_command (default `mvn -B -V deploy`)
   * fetch_all_commits (default: `false`)