From 8d0b15f4ecac066648e51e384ceb8737eb7f6a3d Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Wed, 24 Jan 2024 08:40:49 +0100
Subject: [PATCH 1/2] hack: use git context only for upstream repo

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 hack/util | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hack/util b/hack/util
index 2c917d60405a..14ccc624abb5 100755
--- a/hack/util
+++ b/hack/util
@@ -39,7 +39,7 @@ currentref=""
 currentcontext="."
 cacheFromFlags=""
 cacheToFlags=""
-if [ "$GITHUB_ACTIONS" = "true" ]; then
+if [ "$GITHUB_ACTIONS" = "true" ] && [ "$GITHUB_REPOSITORY" = "moby/buildkit" ]; then
   currentref="https://github.com/$GITHUB_REPOSITORY.git#$GITHUB_REF"
   if [ -n "$CACHE_FROM" ]; then
     for cfrom in $CACHE_FROM; do

From 0e70765d9d16af5949acde822f223f23accabc7c Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Wed, 24 Jan 2024 08:47:52 +0100
Subject: [PATCH 2/2] ci: disable push if not upstream repo

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 .github/workflows/buildkit.yml | 3 +++
 .github/workflows/frontend.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/workflows/buildkit.yml b/.github/workflows/buildkit.yml
index a77eef798ea0..0799235163a3 100644
--- a/.github/workflows/buildkit.yml
+++ b/.github/workflows/buildkit.yml
@@ -57,6 +57,9 @@ jobs:
               PUSH=push
             fi
           fi
+          if [ "$GITHUB_REPOSITORY" != "moby/buildkit" ]; then
+            PUSH=false
+          fi
           echo "tag=${TAG}" >>${GITHUB_OUTPUT}
           echo "push=${PUSH}" >>${GITHUB_OUTPUT}
           platforms=$(docker buildx bake release --print | jq -cr '.target."release".platforms')
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index b6d192b08bb7..4da87a1856ab 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -61,6 +61,9 @@ jobs:
               PUSH=push
             fi
           fi
+          if [ "$GITHUB_REPOSITORY" != "moby/buildkit" ]; then
+            PUSH=false
+          fi
           echo "typ=${TYP}" >>${GITHUB_OUTPUT}
           echo "push=${PUSH}" >>${GITHUB_OUTPUT}
           echo "tag=${TAG}" >>${GITHUB_OUTPUT}