name: identity-guard # Thin caller → the canonical reusable guard in freemkv/.github. on: push: branches: [dev, qa, main] pull_request: concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true jobs: identity: if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork uses: freemkv/.github/.github/workflows/guard-identity.yml@v1