From 3162ac5b45562e35d9586b5f511bbc367294d5dc Mon Sep 17 00:00:00 2001 From: Simon <10131203+gaomeng1900@users.noreply.github.com> Date: Wed, 8 Jul 2026 17:16:39 +0800 Subject: [PATCH] chore(ci): restrict release workflow to authorized actor --- .github/workflows/release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 185595e..617ce6d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,6 +11,8 @@ permissions: jobs: release: + # Only the repo owner may trigger a release, even if tag protection is bypassed + if: github.actor == 'gaomeng1900' runs-on: ubuntu-latest steps: - uses: actions/checkout@v7