fix: prevent unauthorized message for non-command comments

[kami619]

Description

The unauthorized job was incorrectly triggered for any comment from ACL-listed users that didn't contain '/agentready assess'. This fix adds a 'command_invoked' output to distinguish between:

• Command not present in comment (do nothing)
• Command present but user unauthorized (show message)

The unauthorized job now only runs when command_invoked=true AND is_authorized=false.

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactoring (no functional changes)
• Performance improvement
• Test coverage improvement

Related Issues

#249

Changes Made

.github/workflows/agentready-assessment.yml

1. Added new output to job

outputs:
  is_authorized: ${{ steps.check-agentready-acl.outputs.is_authorized }}
+ command_invoked: ${{ steps.check-agentready-acl.outputs.command_invoked }}

2. Set command_invoked flag in script

if ! echo "$COMMENT_BODY" | grep -qi "/agentready assess"; then
+ echo "command_invoked=false" >> "$GITHUB_OUTPUT"
  echo "is_authorized=false" >> "$GITHUB_OUTPUT"
  exit 0
fi
+ echo "command_invoked=true" >> "$GITHUB_OUTPUT"

3. Updated unauthorized job condition

if: |
+ needs.check-agentready-acl.outputs.command_invoked == 'true' &&
  needs.check-agentready-acl.outputs.is_authorized == 'false' &&
  (github.event_name == 'issue_comment' || ...)

Testing

Test Issue with test comments :
kami619#4

Working Runs:

• https://github.com/kami619/agentready/actions/runs/21044358399 - With the user in the ACL list /agentready assess works without issue.

• https://github.com/kami619/agentready/actions/runs/21044323795 - With the user not in the ACL /agentready assess action skips from being executed.

• https://github.com/kami619/agentready/actions/runs/21044302298 - With the comment body not containing /agentready assess the action skips from executed the ACL checks.

• Unit tests pass (pytest)

• Integration tests pass

• Manual testing performed

• No new warnings or errors

Checklist

• My code follows the project's code style
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published

[github-actions]

📈 Test Coverage Report

Branch	Coverage
This PR	62.3%
Main	62.3%
Diff	✅ +0%

---

Coverage calculated from unit tests only

[chambridge]

LGTM

[github-actions]

🎉 This PR is included in version 2.22.3 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀