Restricts workflows to repo members and collaborators

[ahaywood]

Summary

Add GitHub author association checks to workflows to restrict access to repository members and collaborators only.

Solution

Added author_association checks to both bonk.yml and bigbonk.yml workflows to ensure only users with the following associations can trigger the workflows:

• OWNER - Repository owners
• MEMBER - Organization members
• COLLABORATOR - Repository collaborators

[github-actions]

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern	Owners
/.github/	@cloudflare/content-engineering, @kodster28, @mvvmm, @colbywhite, @ahaywood, @MohamedH1998

[kodster28]

/bonk see any potential issues with this?

[ask-bonk]

The PR adds author_association checks to both workflows to restrict access to repo members and collaborators. The changes look correct:

• Proper YAML literal block scalar syntax (>-) for multi-line if conditions
• Correct parenthesized OR logic for OWNER, MEMBER, and COLLABORATOR checks
• Both workflows updated consistently
• Sensible security enhancement for administrative AI agent workflows

No issues found. The implementation is solid and follows GitHub Actions best practices.

github run

[kodster28]

/bonk check the previous review. Does it make sense?

[ask-bonk]

No issues found. The author_association checks are correctly implemented in both workflow files:

• bonk.yml (lines 18-22): Properly restricts /bonk triggers to OWNER, MEMBER, or COLLABORATOR
• bigbonk.yml (lines 17-21): Properly restricts /bigbonk triggers to OWNER, MEMBER, or COLLABORATOR

Both files use correct YAML literal block scalar syntax (>-) with proper parenthesized OR logic. The checks are combined with the existing Bot filter using &&, ensuring only authorized human users can trigger these AI agent workflows.

github run

[github-actions]

Preview URL: https://53a052c3.preview.developers.cloudflare.com
Preview Branch URL: https://ad-add-gh-member-check.preview.developers.cloudflare.com