diff --git a/.github/workflows/createNewVersion.yml b/.github/workflows/createNewVersion.yml index 2fa033dedd30..5a804c75da3f 100644 --- a/.github/workflows/createNewVersion.yml +++ b/.github/workflows/createNewVersion.yml @@ -26,9 +26,21 @@ on: required: true jobs: + validateActor: + runs-on: ubuntu-latest + outputs: + HAS_WRITE_ACCESS: ${{ contains(fromJSON('["write", "admin"]'), steps.getUserPermissions.outputs.PERMISSION) }} + steps: + - name: Get user permissions + id: getUserPermissions + run: echo "::set-output name=PERMISSION::$(gh api /repos/${{ github.repository }}/collaborators/${{ github.actor }}/permission | jq -r '.permission')" + env: + GITHUB_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }} + createNewVersion: - if: github.actor == 'OSBotify' runs-on: macos-latest + needs: validateActor + if: ${{ fromJSON(needs.validateActor.outputs.HAS_WRITE_ACCESS) }} outputs: NEW_VERSION: ${{ steps.bumpVersion.outputs.NEW_VERSION }}