Skip to content

v2.0.6 — root-cause fix (public repos auto-review)

Choose a tag to compare

View all tags
@nsportsman nsportsman released this 19 Apr 18:10
v2.0.6
4e998eb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Root cause diagnosed

v2.0.3-v2.0.5 silently skipped every Claude run on public repos. Empirical debug on titus PR #180 proved github.event.pull_request.author_association returned CONTRIBUTOR (not MEMBER) in the webhook event payload for org members on public repos, even though the REST API returned MEMBER.

Fix

Replace author_association check with:

github.event.pull_request.head.repo.full_name == github.repository

Strictly stronger: deterministic, no quirky per-repo field resolution, equally secure (blocks fork PRs and the comment-and-control path).

Caller pin line

uses: praetorian-inc/public-workflows/.github/workflows/claude-code.yml@4e998eb54df4946e9b8547e20da8148f2a57499a  # v2.0.6

All v2.0.3-v2.0.5 callers should bump to v2.0.6 immediately — prior versions silently skip on public repos.

Assets 2
Loading