vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 08:40:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: require maintainer permission for command reactions

Browse Source
This commit is contained in:
Vincent Koc
2026-04-29 00:30:13 -07:00
parent b69b508d20
commit 275b0f00b0
1 changed files with 22 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
.github/workflows/maintainer-command-reactions.yml vendored
View File

@@ -40,12 +40,6 @@ jobs:
script: |
const comment = context.payload.comment;
const issue = context.payload.issue;
const association = comment.author_association;
const maintainerAssociations = new Set(["OWNER", "MEMBER", "COLLABORATOR"]);
if (!maintainerAssociations.has(association)) {
core.info(`Skipping non-maintainer command reaction for association ${association || "unknown"}.`);
return;
}
if (!issue.pull_request) {
core.info("Skipping command reaction because the comment is not on a pull request.");
@@ -66,6 +60,28 @@ jobs:
return;
}
const maintainerPermissions = new Set(["admin", "maintain", "write"]);
let permission = "none";
try {
const result = await github.rest.repos.getCollaboratorPermissionLevel({
owner: context.repo.owner,
repo: context.repo.repo,
username: comment.user.login,
});
permission = String(result.data.permission || "none").toLowerCase();
} catch (error) {
if (error.status !== 404) {
core.info(`Could not resolve repository permission for ${comment.user.login}: ${error.message}`);
}
}
if (!maintainerPermissions.has(permission)) {
core.info(
`Skipping non-maintainer command reaction for ${comment.user.login}; repository permission is ${permission}.`,
);
return;
}
async function react(content) {
try {
await github.rest.reactions.createForIssueComment({