mirror of
https://github.com/pezkuwichain/pezkuwi-subxt.git
synced 2026-04-26 01:47:55 +00:00
Maksym H
61d45ed72b
Followup after https://github.com/paritytech/polkadot-sdk/pull/3431 Per https://stackoverflow.com/questions/63188674/github-actions-detect-author-association and https://michaelheap.com/github-actions-check-permission/ looks like just checking NOT a MEMBER is not correct, Not a CONTRIBUTORs check should be included
74 lines
3.3 KiB
YAML
74 lines
3.3 KiB
YAML
name: Review-Trigger
|
|
|
|
on:
|
|
pull_request_target:
|
|
types:
|
|
- opened
|
|
- reopened
|
|
- synchronize
|
|
- review_requested
|
|
- review_request_removed
|
|
- ready_for_review
|
|
pull_request_review:
|
|
|
|
jobs:
|
|
trigger-review-bot:
|
|
# (It is not a draft) && (it is not a review || it is an approving review)
|
|
if: ${{ github.event.pull_request.draft != true && (github.event_name != 'pull_request_review' || (github.event.review && github.event.review.state == 'APPROVED')) }}
|
|
runs-on: ubuntu-latest
|
|
name: trigger review bot
|
|
steps:
|
|
- name: Skip merge queue
|
|
if: ${{ contains(github.ref, 'gh-readonly-queue') }}
|
|
run: exit 0
|
|
- name: Get PR data
|
|
id: comments
|
|
run: |
|
|
echo "bodies=$(gh pr view ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --json comments --jq '[.comments[].body]')" >> "$GITHUB_OUTPUT"
|
|
echo "reviews=$(gh api repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/reviews --jq '[.[].state]')" >> "$GITHUB_OUTPUT"
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
- name: Fail when author pushes new code
|
|
# Require new reviews when the author is pushing and he is not a member
|
|
if: |
|
|
contains(fromJson(steps.comments.outputs.reviews), 'APPROVED') &&
|
|
github.event_name == 'pull_request_target' &&
|
|
github.event.action == 'synchronize' &&
|
|
github.event.sender.login == github.event.pull_request.user.login &&
|
|
github.event.pull_request.author_association != 'CONTRIBUTOR' &&
|
|
github.event.pull_request.author_association != 'MEMBER'
|
|
run: |
|
|
echo "User's association is ${{ github.event.pull_request.author_association }}"
|
|
# We get the list of reviewers who approved the PR
|
|
REVIEWERS=$(gh api repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/reviews \
|
|
--jq '{reviewers: [.[] | select(.state == "APPROVED") | .user.login]}')
|
|
|
|
# We request them to review again
|
|
echo $REVIEWERS | gh api --method POST repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/requested_reviewers --input -
|
|
|
|
echo "::error::Project needs to be reviewed again"
|
|
exit 1
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
- name: Comment requirements
|
|
# If the previous step failed and github-actions hasn't commented yet we comment instructions
|
|
if: failure() && !contains(fromJson(steps.comments.outputs.bodies), 'Review required! Latest push from author must always be reviewed')
|
|
run: |
|
|
gh pr comment ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --body "Review required! Latest push from author must always be reviewed"
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
COMMENTS: ${{ steps.comments.outputs.users }}
|
|
- name: Get PR number
|
|
env:
|
|
PR_NUMBER: ${{ github.event.pull_request.number }}
|
|
run: |
|
|
echo "Saving PR number: $PR_NUMBER"
|
|
mkdir -p ./pr
|
|
echo $PR_NUMBER > ./pr/pr_number
|
|
- uses: actions/upload-artifact@v3
|
|
name: Save PR number
|
|
with:
|
|
name: pr_number
|
|
path: pr/
|
|
retention-days: 5
|