author_association check in example workflows

[glicht]

Hi,

I am testing out the gemini-pr-review workflow from the examples folder.

I noticed that it was being skipped when a pull request is created. The condition that was causing the skip is:

contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)

Link to the line:

run-gemini-cli/examples/workflows/pr-review/gemini-pr-review.yml

Line 45 in fa814da

contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)

I am in a private repo and the value I get from github.event.pull_request.author_association is CONTRIBUTOR (even though the user opening the PR is a MEMBER).

Might be that this test can be modified to take into consideration the case I experienced.

Additionally, I think in a private repo the test can be skipped. Would love to hear your thoughts about this.

[leehagoodjames]

Thanks for filing @glicht. It is disappointing that github.event.pull_request.author_association returns CONTRIBUTOR in this context.

I have made a change to mitigate the impact for private repos, where access to the repo can imply trust (#177) and filed a bug with GitHub to improve this more natively within Actions (actions/github-script#643)