diff --git a/.gitea/workflows/agent.yml b/.gitea/workflows/agent.yml index c3d4723..3d266a8 100644 --- a/.gitea/workflows/agent.yml +++ b/.gitea/workflows/agent.yml @@ -22,8 +22,8 @@ jobs: # Trusted author only, and only when a known agent is mentioned. This gate is the main # defense against malicious-issue prompt injection — do not loosen it. if: > - (github.event_name == 'issues' && github.event.issue.user.login == 'ffaerber') || - (github.event_name == 'issue_comment' && github.event.comment.user.login == 'ffaerber' && + (github.event.comment == null && github.event.issue.user.login == 'ffaerber') || + (github.event.comment != null && github.event.comment.user.login == 'ffaerber' && !contains(github.event.comment.body, '🤖') && (contains(github.event.comment.body, '@pm') || contains(github.event.comment.body, '@junior') ||