From ff800df41d5e0a6ab21f64ad59436f114e0f9b0f Mon Sep 17 00:00:00 2001 From: Slyghtning Date: Thu, 12 Mar 2026 10:04:19 +0100 Subject: [PATCH] .github: restrict @claude trigger to org members and collaborators (#1094) --- .github/workflows/claude-code-review.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index cc34fa40..c13649cf 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -11,7 +11,10 @@ jobs: if: | (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && - github.event.issue.pull_request) || + github.event.issue.pull_request && + (github.event.comment.author_association == 'OWNER' || + github.event.comment.author_association == 'MEMBER' || + github.event.comment.author_association == 'COLLABORATOR')) || (github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'claude-review')) runs-on: ubuntu-latest