fix(workflows): expand trusted author criteria for flasher comments

2026-06-10 20:04:40 -05:00
parent 1490daa7ca
commit a14f7afe87
2 changed files with 14 additions and 8 deletions
@@ -29,10 +29,12 @@ jobs:
            const { owner, repo } = context.repo;
            const pr = context.payload.pull_request;

-            // Only org members get the flasher comment (matches the real workflow)
-            const allowedAssociations = ['OWNER', 'MEMBER'];
+            // Trusted authors only (matches the real workflow). author_association
+            // can't reflect private org membership for the token, so concealed
+            // members appear as CONTRIBUTOR — include it, or maintainers are excluded.
+            const allowedAssociations = ['OWNER', 'MEMBER', 'COLLABORATOR', 'CONTRIBUTOR'];
            if (!allowedAssociations.includes(pr.author_association)) {
-              core.info(`Author association ${pr.author_association} is not an org member; skipping.`);
+              core.info(`Author association ${pr.author_association} is not trusted; skipping.`);
              return;
            }