From 5f78b4ab0416d6445b9f4392fb7b21f4a4fbd81d Mon Sep 17 00:00:00 2001 From: Sebastian Pietrzak Date: Wed, 24 Jun 2026 14:40:34 +0200 Subject: [PATCH] ci: widen Flow B PR-review gate to trusted authors (SebaBoler, pawelkrystkiewicz) --- .github/workflows/vanguard-pr-review.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/vanguard-pr-review.yml b/.github/workflows/vanguard-pr-review.yml index f0d577f4..6ca0eb3f 100644 --- a/.github/workflows/vanguard-pr-review.yml +++ b/.github/workflows/vanguard-pr-review.yml @@ -20,7 +20,8 @@ jobs: github.event_name == 'workflow_dispatch' || (github.event.label.name == 'ready for vanguard review' && github.event.pull_request.draft == false && - github.event.pull_request.user.login == 'SebaBoler') + contains(fromJSON('["SebaBoler","pawelkrystkiewicz"]'), github.event.pull_request.user.login) && + contains(fromJSON('["SebaBoler","pawelkrystkiewicz"]'), github.event.sender.login)) runs-on: ubuntu-latest timeout-minutes: 30 env: @@ -53,4 +54,4 @@ jobs: run: node dist/cli/index.js doctor-prs --github-repo "$GITHUB_REPOSITORY" --label "ready for vanguard review" --repo "$GITHUB_WORKSPACE" - name: Review labeled PRs - run: node dist/cli/index.js watch-prs --once --github-repo "$GITHUB_REPOSITORY" --label "ready for vanguard review" --reviewing-label "vanguard:reviewing" --reviewed-label "vanguard:reviewed" --author SebaBoler --repo "$GITHUB_WORKSPACE" --llm-proxy + run: node dist/cli/index.js watch-prs --once --github-repo "$GITHUB_REPOSITORY" --label "ready for vanguard review" --reviewing-label "vanguard:reviewing" --reviewed-label "vanguard:reviewed" --repo "$GITHUB_WORKSPACE" --llm-proxy