chore: updated workflow permissions and run conditions

Signed-off-by: Adithya Krishna <adi@documenso.com>

.github/workflows/ci.yml

@@ -16,6 +16,7 @@ env:
 jobs:
   build_app:
     name: Build App
+    if: github.repository == 'documenso/documenso'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout

.github/workflows/codeql-analysis.yml

@@ -9,6 +9,7 @@ on:
 
 jobs:
   analyze:
+    if: github.repository == 'documenso/documenso'
     name: Analyze
     runs-on: ubuntu-latest
     permissions:

.github/workflows/first-interaction.yml

@@ -13,9 +13,9 @@ permissions:
 jobs:
   welcome-message:
     name: Welcome Contributors
+    if: github.repository == 'documenso/documenso' && github.event.action == 'opened'
     runs-on: ubuntu-latest
     timeout-minutes: 10
-    if: github.event.action == 'opened'
     steps:
       - uses: actions/first-interaction@v1
         with:

.github/workflows/issue-count.yml

@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   countIssues:
-    if: ${{ !github.event.issue.pull_request }}
+    if: ${{ !github.event.issue.pull_request }} && github.repository == 'documenso/documenso' && github.event.comment.author_association == 'MEMBER' || 'COLLABORATOR' || 'OWNER'
     runs-on: ubuntu-latest
     env:
       MY_ENV_VARIABLE: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-count.yml

@@ -6,11 +6,11 @@ on:
     types: [created]
 
 permissions:
-  pull-requests:  write
+  pull-requests: write
 
 jobs:
   countPRs:
-    if: ${{ github.event.issue.pull_request }}
+    if: ${{ github.event.issue.pull_request }} && github.repository == 'documenso/documenso' && github.event.comment.author_association == 'MEMBER' || 'COLLABORATOR' || 'OWNER'
     runs-on: ubuntu-latest
     env:
       MY_ENV_VARIABLE: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-labeler.yml

@@ -9,6 +9,7 @@ concurrency:
 
 jobs:
   labeler:
+    if: github.repository == 'documenso/documenso'
     permissions:
       contents: read
       pull-requests: write

.github/workflows/semantic-pull-requests.yml

@@ -13,6 +13,7 @@ permissions:
 
 jobs:
   validate-pr:
+    if: github.repository == 'documenso/documenso'
     name: Validate PR title
     runs-on: ubuntu-latest
     steps:

.github/workflows/stale.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   stale:
-
+    if: github.repository == 'documenso/documenso'
     runs-on: ubuntu-latest
     permissions:
       issues: write