CI

.github/workflows/ci.yml

@@ -6,43 +6,61 @@ on:
 
 jobs:
   Regression:
-    if: ((github.event.review.state == 'approved') || (github.event.pull_request.user.email == '[email protected]')) && (github.event.pull_request.base.ref == 'main')
-    runs-on: ubuntu-latest
-
-    container:
-      image: public.ecr.aws/certora/cvt-image:2024.10.23-4499-c4f8ad4
 
     env:
+      ALLOWED_EMAILS: ${{ secrets.ALLOWED_EMAILS }}
       ETHSCAN_API_KEY: ${{ secrets.ETHSCAN_API_KEY }}
       QUORUM_PATH: "."
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
 
+    if: >
+      (
+        (github.event.review.state == 'approved') ||
+        contains(github.env.ALLOWED_EMAILS, github.event.pull_request.user.email)
+      )
+      &&
+      (github.event.pull_request.base.ref == 'main')
+    runs-on: ubuntu-latest
+
+    container:
+      image: public.ecr.aws/certora/cvt-image:2024.10.23-4499-c4f8ad4
+
+
     permissions:
       id-token: write
       contents: read
 
     steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
+      - name: Checkout code
+        uses: actions/checkout@v4
 
-    - name: Install Quorum Repo
-      run: pip3.11 install .
+      - name: Install Quorum Repo
+        run: pip3.11 install .
 
-    - name: Execute Regression Tests
-      run: |
-        pytest Quorum/tests --maxfail=1 --disable-warnings --tb=short
-        CheckProposal --config Quorum/execution.json
+      - name: Execute Regression Tests
+        run: |
+          pytest Quorum/tests --maxfail=1 --disable-warnings --tb=short
+          CheckProposal --config Quorum/execution.json
 
   
   Update-Version:
-    if: ((github.event.review.state == 'approved') || (github.event.pull_request.user.email == '[email protected]')) && (github.event.pull_request.base.ref == 'main')
+    env:
+      ALLOWED_EMAILS: ${{ secrets.ALLOWED_EMAILS }}
+
+    if: >
+      (
+        (github.event.review.state == 'approved') ||
+        contains(github.env.ALLOWED_EMAILS, github.event.pull_request.user.email)
+      )
+      &&
+      (github.event.pull_request.base.ref == 'main')
     needs: Regression
     runs-on: ubuntu-latest
     permissions:
       id-token: write
       contents: write
       actions: write
-    
+
     steps:
       - uses: actions/checkout@v4