tree a819bdc1e5a2db753880f626870c288f42ab402e
parent 28fe2e848379f09c65eb7aeb3c6569680ad6123d
author Richard Levasseur <richardlev@gmail.com> 1790838113 -0700
committer GitHub <noreply@github.com> 1790838113 -0700
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJqvgVhCRC1aQ7uu5UhlAAAhZAQABP58XASniC4Tbcx37+dUK5h
 eQEJunDkPlAEGVcAHzPI6lJmSvaLDktNhOaDt1rpVfrgvwkOHJ3JMsA5biURRa3R
 iUTNQTfG4Ryk1VuK6GYVXTdtec8wq4KnttIV0ZSOnYvg2H96UpQVTZhDQvN2VO/z
 tZpUBsyznRuEJB4wtrII84t5wKuEwe5g3EzE6KthLaFuFwVTC/haUgcHMOncmVG/
 cBCezAN8E32A4v8gCOZZlx1ujlIiIjCSaG+1k0O8J2H56Y6jwUguOTIqbBDVCSlm
 3IKBWjKxXkL11L+DJK9eqCL25BVMr2Y9KOMm1E5HFWU+6OdvhJni2EDpH34YMVja
 p794+K80jTDEXP3WnukH2cA4bSpeAMcMgc4SXvMN/pUxThp9y6iHhbe5JcPIYoYr
 4pNQKsP4taDYFrdCjrFoB4mzPQFXEyYlbSpTNCpa5dihB971DVAnvDxTR8mPmMbm
 gQYX6H56yvtHpoSpGZzZMq2ONK337lKFEhll8fpfyISHY5bQkA0+SS8G5H8VVqqd
 Hp1XfxqmH8af10wh5TXWn6/biBtZqWmoso1SsMV7QEJdww2dtXafCB7Dqb3tUTPa
 eAw3HbrkgG/E29EQF8ZRDdjqUgCsq5OD7bYzgjOtlJoYzcLulHCUYtAuFSmwwZxL
 KdOyO5emH91an4bBBTpz
 =qHR3
 -----END PGP SIGNATURE-----
 

workflow: allow specific users to trigger backport comment commands (#4203)

Currently, the comment dispatch workflow only permits repository
owners, members, and collaborators to run slash commands. Trusted
contributors outside those roles cannot request backports on pull
requests or release tracking issues via `/backport` comments.

Add an explicit user allowlist to the workflow gate and enforce
per-command authorization in the comment parser. Allowlisted users can
trigger `/backport` commands on pull requests and release issues while
remaining blocked from administrative release commands.