Use collaborator permission check instead of org membership (#147)

This commit is contained in:
Noah Zweben
2026-01-06 19:25:24 -08:00
committed by GitHub
parent 76334d1f67
commit b97f6eadd9

View File

@@ -13,35 +13,35 @@ jobs:
if: vars.DISABLE_EXTERNAL_PR_CHECK != 'true' if: vars.DISABLE_EXTERNAL_PR_CHECK != 'true'
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check if author is org member - name: Check if author has write access
uses: actions/github-script@v7 uses: actions/github-script@v7
with: with:
script: | script: |
const org = 'anthropics';
const author = context.payload.pull_request.user.login; const author = context.payload.pull_request.user.login;
try { const { data } = await github.rest.repos.getCollaboratorPermissionLevel({
await github.rest.orgs.checkMembershipForUser({ owner: context.repo.owner,
org: org, repo: context.repo.repo,
username: author username: author
}); });
console.log(`${author} is an org member, allowing PR`);
} catch (e) {
if (e.status === 404) {
await github.rest.issues.createComment({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: context.payload.pull_request.number,
body: `Thanks for your interest! This repo only accepts contributions from Anthropic team members. If you'd like to submit a plugin to the marketplace, please submit your plugin [here](https://docs.google.com/forms/d/e/1FAIpQLSdeFthxvjOXUjxg1i3KrOOkEPDJtn71XC-KjmQlxNP63xYydg/viewform).`
});
await github.rest.pulls.update({ if (['admin', 'write'].includes(data.permission)) {
owner: context.repo.owner, console.log(`${author} has ${data.permission} access, allowing PR`);
repo: context.repo.repo, return;
pull_number: context.payload.pull_request.number,
state: 'closed'
});
console.log(`Closed PR from external contributor: ${author}`);
}
} }
console.log(`${author} has ${data.permission} access, closing PR`);
await github.rest.issues.createComment({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: context.payload.pull_request.number,
body: `Thanks for your interest! This repo only accepts contributions from Anthropic team members. If you'd like to submit a plugin to the marketplace, please submit your plugin [here](https://docs.google.com/forms/d/e/1FAIpQLSdeFthxvjOXUjxg1i3KrOOkEPDJtn71XC-KjmQlxNP63xYydg/viewform).`
});
await github.rest.pulls.update({
owner: context.repo.owner,
repo: context.repo.repo,
pull_number: context.payload.pull_request.number,
state: 'closed'
});