From 10a50e32dbf236277177b1ab02cc6e05f2e1e152 Mon Sep 17 00:00:00 2001
From: Codex Bot <codex-bot@gitea.entroia.local>
Date: Fri, 30 Oct 2026 03:44:05 +0800
Subject: [PATCH] ci: restrict workflows to main branch

---
 .gitea/workflows/ci.yml                         | 7 ++++---
 .gitea/workflows/env-probe.yml                  | 3 ++-
 .gitea/workflows/runner-probe.yml               | 1 +
 .gitea/workflows/runner-storage-maintenance.yml | 2 +-
 4 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 7eb9322..f1874ea 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -11,8 +11,7 @@ name: ci
 
 on:
   push:
-    branches: [main, "ci/**"]
-  pull_request:
+    branches: [main]
   workflow_dispatch:
 
 env:
@@ -20,6 +19,7 @@ env:
 
 jobs:
   python:
+    if: gitea.ref == 'refs/heads/main'
     runs-on: ubuntu24.04-x64-lean4.35
     timeout-minutes: 20
     steps:
@@ -50,6 +50,7 @@ jobs:
           .venv/bin/lean-bench doctor --skip-llm --env /dev/null
 
   lean:
+    if: gitea.ref == 'refs/heads/main'
     needs: python
     runs-on: ubuntu24.04-x64-lean4.35
     timeout-minutes: 150
@@ -82,7 +83,7 @@ jobs:
 
   image:
     needs: [python, lean]
-    if: github.event_name != 'pull_request'
+    if: ${{ gitea.ref == 'refs/heads/main' && (github.event_name != 'pull_request') }}
     runs-on: ubuntu24.04-x64-lean4.35
     timeout-minutes: 180
     steps:
diff --git a/.gitea/workflows/env-probe.yml b/.gitea/workflows/env-probe.yml
index 75cf11b..1f68af7 100644
--- a/.gitea/workflows/env-probe.yml
+++ b/.gitea/workflows/env-probe.yml
@@ -2,13 +2,14 @@ name: env-probe
 
 on:
   push:
-    branches: ["ci/**"]
+    branches: [main]
     paths:
       - ".gitea/workflows/env-probe.yml"
   workflow_dispatch:
 
 jobs:
   probe:
+    if: gitea.ref == 'refs/heads/main'
     runs-on: ubuntu24.04-x64-lean4.35
     timeout-minutes: 15
     steps:
diff --git a/.gitea/workflows/runner-probe.yml b/.gitea/workflows/runner-probe.yml
index b6804e9..42c77f7 100644
--- a/.gitea/workflows/runner-probe.yml
+++ b/.gitea/workflows/runner-probe.yml
@@ -10,6 +10,7 @@ on:
 
 jobs:
   probe:
+    if: gitea.ref == 'refs/heads/main'
     runs-on: gitea-cicd-server-for-CODEX
     timeout-minutes: 10
     steps:
diff --git a/.gitea/workflows/runner-storage-maintenance.yml b/.gitea/workflows/runner-storage-maintenance.yml
index 2fb786e..0cd9ca2 100644
--- a/.gitea/workflows/runner-storage-maintenance.yml
+++ b/.gitea/workflows/runner-storage-maintenance.yml
@@ -11,7 +11,7 @@ on:
 
 jobs:
   expand-root:
-    if: ${{ github.event_name == 'workflow_dispatch' && inputs.confirm == 'EXPAND_RUNNER_ROOT' }}
+    if: ${{ gitea.ref == 'refs/heads/main' && (github.event_name == 'workflow_dispatch' && inputs.confirm == 'EXPAND_RUNNER_ROOT') }}
     runs-on: ubuntu24.04-x64-lean4.35
     timeout-minutes: 20
     steps:
-- 
2.52.0