ci: Protect workflows via CODEOWNERS and explicit user matching (#240)

mansenfranzen · Mar 26, 2024 · c07d1f2 · c07d1f2
1 parent 11afaf3
commit c07d1f2
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/pr_agent.yml → .github/workflows/pr-agent.yml b/.github/workflows/pr_agent.yml → .github/workflows/pr-agent.yml
@@ -12,6 +12,7 @@ jobs:
       pull-requests: write
       contents: write
     name: Run pr agent on every pull request, respond to user comments
+    if: (github.actor == 'mansenfranzen') || (github.triggering_actor == 'mansenfranzen')
     steps:
       - name: PR Agent action step
         id: pragent

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
@@ -1,3 +1,5 @@
+name: Release
+
 on:
   push:
     branches:
@@ -7,7 +9,6 @@ permissions:
   contents: write
   pull-requests: write
 
-name: release-please
 
 jobs:
   release-please:

diff --git a/CODEOWNERS b/CODEOWNERS
@@ -0,0 +1,3 @@
+/.github/workflows/pr-agent.yml @mansenfranzen
+/.github/workflows/release-please.yml @mansenfranzen
+/CODEOWNERS @mansenfranzen