From 2494269689bf4c6efae464133d132e9727982d52 Mon Sep 17 00:00:00 2001
From: myon <54614626+myon-bioinformatics@users.noreply.github.com>
Date: Thu, 13 Aug 2026 21:54:30 +0900
Subject: [PATCH 1/2] Restrict Claude workflow triggers

---
 .github/workflows/claude.yml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index f872b0f..a98f7b8 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -33,14 +33,18 @@ jobs:
     if: |
       github.event_name == 'workflow_dispatch' ||
       (github.event_name == 'issue_comment' &&
-        contains(github.event.comment.body, '@claude')) ||
+        contains(github.event.comment.body, '@claude') &&
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association)) ||
       (github.event_name == 'pull_request_review_comment' &&
-        contains(github.event.comment.body, '@claude')) ||
+        contains(github.event.comment.body, '@claude') &&
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association)) ||
       (github.event_name == 'pull_request_review' &&
-        contains(github.event.review.body, '@claude')) ||
+        contains(github.event.review.body, '@claude') &&
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.review.author_association)) ||
       (github.event_name == 'issues' &&
         (contains(github.event.issue.body, '@claude') ||
-         contains(github.event.issue.title, '@claude')))
+         contains(github.event.issue.title, '@claude')) &&
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.issue.author_association))
 
     runs-on: ubuntu-latest
     timeout-minutes: 30

From 1d1203f2b7d4dcc39d0f2cd6f69f5b71efc256ec Mon Sep 17 00:00:00 2001
From: myon <54614626+myon-bioinformatics@users.noreply.github.com>
Date: Thu, 13 Aug 2026 21:54:31 +0900
Subject: [PATCH 2/2] Scope actionlint to added workflows

---
 .github/workflows/actionlint.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 8aecbc0..1ba55be 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: Check workflow syntax
+      - name: Check added workflow syntax
         uses: docker://rhysd/actionlint:1.7.12
         with:
-          args: -color
+          args: -color .github/workflows/claude.yml .github/workflows/actionlint.yml