[backport] ci: restrict only admin user can run slash commands workfl…

…ow (#604) (#605) ci: restrict only admin user can run slash commands workflow (#604) (cherry picked from commit d394d89) Signed-off-by: Lin Yang <[email protected]> Co-authored-by: Lin Yang <[email protected]>
flomesh-io · Dec 31, 2024 · 6753a16 · 6753a16
1 parent 59b8f26
commit 6753a16
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.github/workflows/slash-commands.yml b/.github/workflows/slash-commands.yml
@@ -7,7 +7,16 @@ jobs:
   run:
     runs-on: ubuntu-latest
     steps:
-      - uses: wow-actions/slash-commands@v1
+      - name: Check user permission
+        id: check
+        uses: scherermichael-oss/action-has-permission@master
+        with:
+          required-permission: admin
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Execute slash command
+        if: steps.check.outputs.has-permission
+        uses: wow-actions/slash-commands@v1
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           CONFIG_FILE: .github/slash-commands-config.yml