diff --git a/.github/workflows/bigbonk.yml b/.github/workflows/bigbonk.yml
index 164d002ecbe1c6..af83e6f8a5acc3 100644
--- a/.github/workflows/bigbonk.yml
+++ b/.github/workflows/bigbonk.yml
@@ -14,7 +14,12 @@ concurrency:
 
 jobs:
   bonk:
-    if: github.event.sender.type != 'Bot' && contains(github.event.comment.body, '/bigbonk')
+    if: >-
+      github.event.sender.type != 'Bot' &&
+      (github.event.sender.author_association == 'OWNER' ||
+       github.event.sender.author_association == 'MEMBER' ||
+       github.event.sender.author_association == 'COLLABORATOR') &&
+      contains(github.event.comment.body, '/bigbonk')
     runs-on: ubuntu-latest
     timeout-minutes: 30
     permissions:
diff --git a/.github/workflows/bonk.yml b/.github/workflows/bonk.yml
index b6b755e3ffe096..ddd30d98c1e955 100644
--- a/.github/workflows/bonk.yml
+++ b/.github/workflows/bonk.yml
@@ -15,7 +15,13 @@ concurrency:
 
 jobs:
   bonk:
-    if: github.event.sender.type != 'Bot' && contains(github.event.comment.body, '/bonk') && !contains(github.event.comment.body, '/bigbonk')
+    if: >-
+      github.event.sender.type != 'Bot' &&
+      (github.event.sender.author_association == 'OWNER' ||
+       github.event.sender.author_association == 'MEMBER' ||
+       github.event.sender.author_association == 'COLLABORATOR') &&
+      contains(github.event.comment.body, '/bonk') &&
+      !contains(github.event.comment.body, '/bigbonk')
     runs-on: ubuntu-latest
     timeout-minutes: 30
     permissions: