diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index fe26f98e06..e9f848bad2 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -12,20 +12,20 @@ jobs: steps: - name: Check Write Permission uses: octokit/request-action@v2.x - id: check_permission + id: check_permissions with: route: GET /repos/${{ github.repository }}/collaborators/${{ github.actor }}/permission env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Debug Permission Response run: | - echo "Permission raw response: ${{ steps.check_permissions.outputs.data }}" - - name: Validate Write Permission + echo "Permissions raw response: ${{ steps.check_permissions.outputs.data }}" + - name: Validate Write Permissions run: | permission=$(echo "${{ fromJson(steps.check_permissions.outputs.data).permission }}") echo "User ${{ github.actor }} has permissions: $permission" if [[ "$permission" != "write" && "$permission" != "admin" ]]; then - echo "User ${{ github.actor }} does not have sufficient permissions (write or admin) to proceed." + echo "User ${{ github.actor }} does not have sufficient permissions (write or admin) to proceed. Someone from the team needs to rerun this workflow AFTER it has been deemed safe." exit 1 fi - name: Checkout @@ -59,20 +59,20 @@ jobs: steps: - name: Check Write Permission uses: octokit/request-action@v2.x - id: check_permission + id: check_permissions with: route: GET /repos/${{ github.repository }}/collaborators/${{ github.actor }}/permission env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Debug Permission Response run: | - echo "Permission raw response: ${{ steps.check_permissions.outputs.data }}" - - name: Validate Write Permission + echo "Permissions raw response: ${{ steps.check_permissions.outputs.data }}" + - name: Validate Write Permissions run: | permission=$(echo "${{ fromJson(steps.check_permissions.outputs.data).permission }}") echo "User ${{ github.actor }} has permissions: $permission" if [[ "$permission" != "write" && "$permission" != "admin" ]]; then - echo "User ${{ github.actor }} does not have sufficient permissions (write or admin) to proceed." + echo "User ${{ github.actor }} does not have sufficient permissions (write or admin) to proceed. Someone from the team needs to rerun this workflow AFTER it has been deemed safe." exit 1 fi - name: Checkout