Fix security issue

jupyter-widgets-contrib · Sep 4, 2024 · a4d4d73 · a4d4d73
1 parent c2ba661
commit a4d4d73
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/update_galata_references.yml b/.github/workflows/update_galata_references.yml
@@ -15,7 +15,12 @@ defaults:
 jobs:
  update-reference-screenshots:
  name: Update Galata References
- if: ${{ github.event.issue.pull_request && contains(github.event.comment.body, 'update galata references') }}
+ if: >
+ (
+ github.event.comment.author_association == 'OWNER' ||
+ github.event.comment.author_association == 'COLLABORATOR' ||
+ github.event.comment.author_association == 'MEMBER'
+ ) && github.event.issue.pull_request && contains(github.event.comment.body, 'please update snapshots')
  runs-on: ubuntu-latest
 
  steps: