Function buildCommentAuthorAssociationCondition

pkg/workflow/expression_builder.go:179–209

buildCommentAuthorAssociationCondition returns a ConditionNode that passes for non-comment events and for comment events whose author is an OWNER, MEMBER, or COLLABORATOR. Actors listed in bots (from on.bots) are also exempted so that bot/app-triggered workflows continue to work even though bots rar

(bots []string)

// workflows) while remaining transparent to non-comment events such as push or schedule,
// and preserves existing on.bots allow-list behaviour.
func buildCommentAuthorAssociationCondition(bots []string) ConditionNode {
	notIssueComment := BuildNotEquals(
		BuildPropertyAccess("github.event_name"),
		BuildStringLiteral("issue_comment"),
	)
	notPRReviewComment := BuildNotEquals(
		BuildPropertyAccess("github.event_name"),
		BuildStringLiteral("pull_request_review_comment"),
	)
	notCommentEvent := BuildAnd(notIssueComment, notPRReviewComment)

	authorizedAssoc := BuildFunctionCall(
		"contains",
		BuildFunctionCall("fromJSON", BuildStringLiteral(`["OWNER","MEMBER","COLLABORATOR"]`)),
		BuildPropertyAccess("github.event.comment.author_association"),
	)

	result := BuildOr(notCommentEvent, authorizedAssoc)
	if len(bots) > 0 {
		botTerms := make([]ConditionNode, len(bots))
		for i, bot := range bots {
			botTerms[i] = BuildEquals(
				BuildPropertyAccess("github.actor"),
				BuildStringLiteral(bot),
			)
		}
		result = BuildOr(result, BuildDisjunction(false, botTerms...))
	}

	return result
}

func buildAuthorAssociationNodeForEvent(eventName string) ConditionNode {
	switch eventName {