fix(ci): restrict issue comments to members or owners (apache#28633)

preset-io · May 22, 2024 · 1573c10 · 1573c10
1 parent ac53f7f
commit 1573c10
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/update-monorepo-lockfiles.yml b/.github/workflows/update-monorepo-lockfiles.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     if: >
       (github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]') ||
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@supersetbot trigger-dependabot-lockfile') && github.event.issue.pull_request)
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@supersetbot trigger-dependabot-lockfile') && github.event.issue.pull_request && (github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER'))
     defaults:
       run:
         working-directory: superset-frontend