From c58213d7abcf7f11202e855367c0054af1c4b041 Mon Sep 17 00:00:00 2001
From: Peter Collins <pecolli@microsoft.com>
Date: Mon, 4 Mar 2024 12:28:29 -0800
Subject: [PATCH] [ci] Fix SDL Sources Analysis for PRs from forks

The recent 1ES pipeline template migration added a new source code
analysis stage that is failing on PR builds from forks.  We should be
able to fix this by skipping AzDO build tagging and monodroid scanning
for such builds.
---
 build-tools/automation/azure-pipelines.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/build-tools/automation/azure-pipelines.yaml b/build-tools/automation/azure-pipelines.yaml
index b54da059e77..4cedf139685 100644
--- a/build-tools/automation/azure-pipelines.yaml
+++ b/build-tools/automation/azure-pipelines.yaml
@@ -87,12 +87,15 @@ extends:
         os: windows
       sourceRepositoriesToScan:
         include:
-        - repository: monodroid
+        - ${{ if ne(variables['System.PullRequest.IsFork'], 'True') }}:
+          - repository: monodroid
         exclude:
         - repository: yaml-templates
         - repository: maui
       suppression:
         suppressionFile: $(Build.SourcesDirectory)\.gdn\.gdnsuppress
+    settings:
+      skipBuildTagsForGitHubPullRequests: true
     stages:
     - template: /build-tools/automation/yaml-templates/build-macos.yaml@self