[PR #327] [MERGED] fix: restrict bonk commands to repo members, collaborators, and owners #483

New issue

Closed

opened 2026-05-06 13:08:19 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 13:08:19 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/cloudflare/vinext/pull/327
Author: @james-elicx
Created: 3/7/2026
Status: ✅ Merged
Merged: 3/7/2026
Merged by: @james-elicx

Base: main ← Head: fix/bonk-author-association

📝 Commits (1)

91ee7ca fix: restrict bonk commands to repo members, collaborators, and owners

📊 Changes

2 files changed (+16 additions, -2 deletions)

View changed files

📝 .github/workflows/bigbonk.yml (+8 -1)
📝 .github/workflows/bonk.yml (+8 -1)

📄 Description

Summary

Adds author_association check to both bonk.yml and bigbonk.yml, matching the existing pattern in deploy-preview-command.yml
/bonk, @ask-bonk, and /bigbonk can now only be triggered by MEMBER, COLLABORATOR, or OWNER — preventing arbitrary users from invoking the AI agent

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/cloudflare/vinext/pull/327 **Author:** [@james-elicx](https://github.com/james-elicx) **Created:** 3/7/2026 **Status:** ✅ Merged **Merged:** 3/7/2026 **Merged by:** [@james-elicx](https://github.com/james-elicx) **Base:** `main` ← **Head:** `fix/bonk-author-association` --- ### 📝 Commits (1) - [`91ee7ca`](https://github.com/cloudflare/vinext/commit/91ee7caf6378eaeb745c9dae9d95e7902316527e) fix: restrict bonk commands to repo members, collaborators, and owners ### 📊 Changes **2 files changed** (+16 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/bigbonk.yml` (+8 -1) 📝 `.github/workflows/bonk.yml` (+8 -1) </details> ### 📄 Description ## Summary - Adds `author_association` check to both `bonk.yml` and `bigbonk.yml`, matching the existing pattern in `deploy-preview-command.yml` - `/bonk`, `@ask-bonk`, and `/bigbonk` can now only be triggered by `MEMBER`, `COLLABORATOR`, or `OWNER` — preventing arbitrary users from invoking the AI agent --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>