Trigger Policies

Control who can trigger automation on your repositories.

Overview

Trigger policies determine:

• Who can mention @forkline to create tasks
• Whose CI failures trigger auto-fix
• Who can trigger automation on your repositories

Info: Without trigger policies, anyone who can comment on your repository could trigger automation.

Policy Types

Policy	Who Can Trigger	Best For
Owner only	Only you	Personal repositories
Collaborators	Users with write access	Shared repositories
Allowlist	Specific usernames	Controlled access
Anyone	All users	Open source

Owner Only

Only the repository owner can trigger automation.

Collaborators (Default)

Users with write access to the repository can trigger.

Allowlist

Only specified usernames can trigger automation.

Anyone

Any user who can comment can trigger automation.

Warning: This policy allows anyone to trigger automation. Use with caution on public repositories.

Configuring Policies

1. Navigate to Repositories
2. Find your repository
3. Click Settings on the repository card
4. In the modal, find Trigger Policy
5. Select the policy
6. If allowlist, add usernames
7. Click Save

Next Steps

• Configure webhooks
• Learn about bot mentions