Handle the case where a security team member is a committer but
not a pmc member (i.e staff)
diff --git a/custom/asf.js b/custom/asf.js
index a882883..65dca02 100644
--- a/custom/asf.js
+++ b/custom/asf.js
@@ -36,7 +36,7 @@
for (i=0; i< body.projects.length; i++) {
if (!pmcs.includes(body.projects[i])) {
// we're a committer to project, but not in the PMC
- if (conf.pmcswithsecurityemails.includes(body.projects[i])) {
+ if (conf.pmcswithsecurityemails.includes(body.projects[i]) || body.projects[i] == "security") {
// but this project has a security list
console.log("User "+body.uid+" is committer to "+body.projects[i]+" but not PMC, allowed");
pmcs.push(body.projects[i]);