mirror of
https://github.com/cline/cline.git
synced 2026-09-12 09:14:50 +08:00
Add author_association check so only MEMBER, OWNER, and COLLABORATOR users can trigger the JetBrains test workflow via issue comments. Previously any GitHub user could trigger it, allowing unauthorized use of the GitHub App token and Actions minutes. Fixes GHSA-5fq9-fh5x-w83r (SEC-29) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>