restrict issues to just WorkOS folks

Author: gjtorikian

.github/workflows/restrict-issues.yml

@@ -0,0 +1,43 @@
+name: Restrict Issues to Collaborators
+
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  check-collaborator:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check if user is collaborator
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
+        with:
+          script: |
+            const creator = context.payload.issue.user.login;
+            const authorAssociation = context.payload.issue.author_association;
+
+            // Allow if user is a collaborator, member, owner, or previous contributor (includes bots)
+            const allowedAssociations = ['COLLABORATOR', 'MEMBER', 'OWNER', 'CONTRIBUTOR'];
+
+            if (allowedAssociations.includes(authorAssociation)) {
+              console.log(`${creator} has association "${authorAssociation}". Issue allowed.`);
+              return;
+            }
+
+            // Not authorized - close the issue
+            console.log(`${creator} has association "${authorAssociation}". Closing issue.`);
+
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              body: `Hi @${creator}! This repository restricts issue creation to WorkOS team members only. ` +
+                    `If you need to report an issue with our OpenAPI spec, please [contact the WorkOS team directly](https://workos.com/contact).`
+            });
+
+            await github.rest.issues.update({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              state: 'closed',
+              state_reason: 'not_planned'
+            });