Add comment

buildbuddy-io · Dec 19, 2024 · b9fead3 · b9fead3
1 parent 327a776
commit b9fead3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/enterprise/server/webhooks/github/github.go b/enterprise/server/webhooks/github/github.go
@@ -263,6 +263,8 @@ func (*githubGitProvider) IsTrusted(ctx context.Context, accessToken, repoURL, u
 		}
 		return false, status.UnknownErrorf("get permission level: %s", err)
 	}
+	// Trusted workflows get cache write perms, so if the user doesn't have
+	// write perms for the repo then don't consider the workflow trusted.
 	return level.GetPermission() == "admin" || level.GetPermission() == "write", nil
 }