From 604a3c9b1334344557ae17ea0e29883e79b96058 Mon Sep 17 00:00:00 2001 From: David Soria Parra Date: Tue, 7 Oct 2025 14:00:27 +0100 Subject: [PATCH] Restrict @claude mentions to steering-committee team members MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Only users who are active members of the @steering-committee team can trigger Claude via @claude mentions. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- .github/workflows/claude.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 2b6c87d..cd87eeb 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -25,6 +25,22 @@ jobs: id-token: write actions: read # Required for Claude to read CI results on PRs steps: + - name: Check team membership + run: | + # Check if user is member of steering-committee team + TEAM_SLUG="steering-committee" + RESPONSE=$(gh api "orgs/modelcontextprotocol/teams/${TEAM_SLUG}/memberships/${{ github.actor }}" 2>&1) + + if echo "$RESPONSE" | grep -q '"state": "active"'; then + echo "✓ User is a member of $TEAM_SLUG team" + exit 0 + else + echo "✗ User is not a member of $TEAM_SLUG team or its subteams" + exit 1 + fi + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + - name: Checkout repository uses: actions/checkout@v4 with: