contrib/intel/jenkins: Do not run pipeline for unauthorized users

Lookup a all teams and users in the ofiwg github team. If the submitter is not in the list of users then deny them Signed-off-by: Zach Dworkin <[email protected]>
HewlettPackard · Dec 19, 2024 · 482e474 · 482e474
1 parent 9b7f27c
commit 482e474
Showing 1 changed file with 17 additions and 7 deletions.
diff --git a/contrib/intel/jenkins/Jenkinsfile b/contrib/intel/jenkins/Jenkinsfile
@@ -397,6 +397,23 @@ pipeline {
         }
       }
     }
+    stage ('bootstrap-ci') {
+      steps {
+        script {
+          bootstrap_ci()
+        }
+      }
+    }
+    stage('check-authorization') {
+      steps {
+        script {
+          sh """source ${CI_LOCATION}/${env.CI_MODULE}/venv/bin/activate;\
+                python ${CI_LOCATION}/authorize.py \
+                --author=${env.CHANGE_AUTHOR}
+          """
+        }
+      }
+    }
     stage ('opt-out') {
       steps {
         script {
@@ -433,13 +450,6 @@ pipeline {
         }
       }
     }
-    stage ('bootstrap-ci') {
-      steps {
-        script {
-          bootstrap_ci()
-        }
-      }
-    }
     stage ('build-libfabric') {
       when { equals expected: true, actual: DO_RUN }
       parallel {