Handle the case where a security team member is a committer but
not a pmc  member (i.e staff)
diff --git a/custom/asf.js b/custom/asf.js
index a882883..65dca02 100644
--- a/custom/asf.js
+++ b/custom/asf.js
@@ -36,7 +36,7 @@
 		for (i=0; i< body.projects.length; i++) {
 		    if (!pmcs.includes(body.projects[i])) {
 			// we're a committer to project, but not in the PMC
-			if (conf.pmcswithsecurityemails.includes(body.projects[i])) {
+			if (conf.pmcswithsecurityemails.includes(body.projects[i]) || body.projects[i] == "security") {
 			    // but this project has a security list
 			    console.log("User "+body.uid+" is committer to "+body.projects[i]+" but not PMC, allowed");
 			    pmcs.push(body.projects[i]);