From 1651c6c5ffe7df0520ee374d7ee53a191be045d2 Mon Sep 17 00:00:00 2001
From: "rubas-agent[bot]" <334313564+rubas-agent[bot]@users.noreply.github.com>
Date: Mon, 28 Sep 2026 21:39:05 +0200
Subject: [PATCH] ci: run the checks on every same-repo PR, bot PRs included

The gate compared the PR author with the repo owner, so PRs that the agents
open as rubas-agent[bot] skipped the Rust checks. A same-repo check keeps
fork PRs off the incus runners just the same.
---
 .github/workflows/ci.yml | 2 +-
 AGENTS.md                | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f12c654..edec664 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ permissions: {}
 jobs:
   checks:
     name: Checks
-    if: github.event_name == 'push' || github.event.pull_request.user.login == github.repository_owner
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: incus
     permissions:
       contents: read # checkout source
diff --git a/AGENTS.md b/AGENTS.md
index 152b71a..939d632 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -39,5 +39,5 @@ covers install, the token, and usage.
   `Cargo.toml`, or `nix build` makes a package with the old version.
 - `install.sh` runs under `sh` on Linux with GNU tools and on macOS with BSD tools. Use POSIX sh
   and only flags that both sets have: no `realpath --relative-to`, no `ln -T`.
-- `ci.yml` skips a pull request whose author is not the repository owner. A contributor PR shows
-  no checks. That is the gate, not a broken run.
+- `ci.yml` runs its checks only on a pull request from a branch of this repo, so a fork PR never
+  reaches the incus runners. A fork PR shows no checks. That is the gate, not a broken run.