AraandClaude Opus 4.6 e92c7de8c0 Restrict /test-jetbrains workflow trigger to authorized users (#9657) ...

Add author_association check so only MEMBER, OWNER, and COLLABORATOR
users can trigger the JetBrains test workflow via issue comments.
Previously any GitHub user could trigger it, allowing unauthorized
use of the GitHub App token and Actions minutes.

Fixes GHSA-5fq9-fh5x-w83r (SEC-29)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-04 09:13:41 -08:00

..

cline-evals-regression.yml

ci: add automatic retries for smoke test jobs (#9503)

2026-02-23 14:55:38 -08:00

e2e.yml

fix(ci): always run npm ci to prevent stale cache issues (#9030)

2026-02-02 10:05:55 -08:00

label-jetbrains-issues.yml

ci: add workflow to auto-label JetBrains plugin issues (#6664)

2025-10-09 21:52:27 -07:00

npm-main.yaml

make trusted npm publish workflow (#9219)

2026-02-09 21:40:04 -08:00

npm-nightly.yaml

make trusted npm publish workflow (#9219)

2026-02-09 21:40:04 -08:00

pack-cli.yml

feat: add CLI build workflow for testing from any commit (#9131)

2026-02-07 05:23:22 -08:00

publish-cli-trusted.yaml

Alex/inf 413 bug no telemetry for versions greater than 20 (#9372)

2026-02-17 18:55:07 -08:00

publish-nightly.yml

fix(release-eng): Pin VSCode nightly build to node version 22 (#9423)

2026-02-19 12:04:14 -08:00

publish.yml

workflow: add default auto-tag flow for Publish Release (#9584)

2026-03-02 11:38:48 -08:00

stale.yml

update stale workflow (#4340)

2025-06-20 21:01:00 -07:00

test-stale.yml

Add stale workflow (#3672)

2025-06-02 19:02:11 -07:00

test.yml

chore: update package-lock.json (#9079)

2026-02-03 21:09:56 -08:00

trigger-jetbrains-tests.yml

Restrict /test-jetbrains workflow trigger to authorized users (#9657)

2026-03-04 09:13:41 -08:00