kszucs edited a comment on pull request #7028:
URL: https://github.com/apache/arrow/pull/7028#issuecomment-618944665


   There is another security constraint about this approach: anyone can trigger 
a rebase on the PR not just the participants / committers. To resolve that you 
need to check `author_association` in the event payload, see the python bot's 
implementation 
[here](https://github.com/apache/arrow/blob/master/dev/archery/archery/bot.py#L179).
   
   We could implement a feature to the python bot to trigger bash scripts to 
make the contributing to the comment bot easier while reusing the existing 
comment handling and responding mechanism.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to