From bc2748da59f0b394eff47a8a9045654977572247 Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Thu, 25 Jul 2024 14:15:26 +0200
Subject: [PATCH 1/2] ci: checkout step for scout job

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 .github/workflows/build.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e4981092e47..c7bdda7f012 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -338,6 +338,9 @@ jobs:
     needs:
       - bin-image
     steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
       -
         name: Login to DockerHub
         uses: docker/login-action@v3

From 6efb1d7cdcffe32ecadb716a89368c4063a3b1ab Mon Sep 17 00:00:00 2001
From: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Date: Thu, 25 Jul 2024 13:54:07 +0200
Subject: [PATCH 2/2] ci: skip scout job on forked repo

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c7bdda7f012..715d22d4233 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -331,9 +331,9 @@ jobs:
 
   scout:
     runs-on: ubuntu-24.04
-    if: ${{ github.ref == 'refs/heads/master' }}
+    if: ${{ github.ref == 'refs/heads/master' && github.repository == 'docker/buildx' }}
     permissions:
-      # required to wirte sarif report
+      # required to write sarif report
       security-events: write
     needs:
       - bin-image