Skip to content

build: restrict slash commands to users with write access #12341

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kgryte merged 3 commits into from
May 29, 2026
Merged

build: restrict slash commands to users with write access #12341

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
036ce67
chore: restrict slash commands to users with write access
Planeshifter May 29, 2026
053a086
chore: also restrict the help slash command to users with write access
Planeshifter May 29, 2026
a83b10c
Apply suggestions from code review
kgryte May 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 20 additions & 5 deletions .github/workflows/slash_commands.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,7 +97,10 @@ jobs:
needs: [ add_initial_reaction ]

# Define the conditions under which the job should run:
if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/stdlib check-files')
if: |
github.event.issue.pull_request &&
startsWith(github.event.comment.body, '/stdlib check-files') &&
contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)

# Run reusable workflow:
uses: ./.github/workflows/check_required_files.yml
Expand Down Expand Up @@ -132,7 +135,10 @@ jobs:
name: 'Update copyright header years'

# Define the conditions under which the job should run:
if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/stdlib update-copyright-years')
if: |
github.event.issue.pull_request &&
startsWith(github.event.comment.body, '/stdlib update-copyright-years') &&
contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)

# Run reusable workflow:
uses: ./.github/workflows/update_pr_copyright_years.yml
Expand All @@ -153,7 +159,10 @@ jobs:
needs: [ add_initial_reaction ]

# Define the conditions under which the job should run:
if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/stdlib lint-autofix')
if: |
github.event.issue.pull_request &&
startsWith(github.event.comment.body, '/stdlib lint-autofix') &&
contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)

# Run reusable workflow:
uses: ./.github/workflows/lint_autofix.yml
Expand All @@ -174,7 +183,10 @@ jobs:
needs: [ add_initial_reaction ]

# Define the conditions under which the job should run:
if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/stdlib merge')
if: |
github.event.issue.pull_request &&
startsWith(github.event.comment.body, '/stdlib merge') &&
contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)

# Run reusable workflow:
uses: ./.github/workflows/pr_merge_develop.yml
Expand All @@ -195,7 +207,10 @@ jobs:
needs: [ add_initial_reaction ]

# Define the conditions under which the job should run:
if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/stdlib rebase')
if: |
github.event.issue.pull_request &&
startsWith(github.event.comment.body, '/stdlib rebase') &&
contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)

# Run reusable workflow:
uses: ./.github/workflows/pr_rebase_develop.yml
Expand Down