1
0
mirror of synced 2025-12-19 18:14:56 -05:00

CI: Add approve-and-merge back as admin only. (#33028)

This commit is contained in:
Ben Church
2023-12-01 16:04:34 -08:00
committed by GitHub
parent 9ab20ebdaf
commit 13b631ca91
2 changed files with 67 additions and 0 deletions

View File

@@ -0,0 +1,48 @@
name: Approve and Merge Command Dispatch
on:
issue_comment:
types: [created]
jobs:
approveAndMergeDispatch:
runs-on: ubuntu-latest
steps:
- name: Auto Approve Slash Command Dispatch
uses: peter-evans/slash-command-dispatch@v3
id: scd
with:
token: ${{ secrets.GH_PAT_APPROVINGTON_OCTAVIA }}
permission: admin
issue-type: pull-request
repository: airbytehq/airbyte-platform-internal
dispatch-type: repository
commands: |
approve-and-merge
- name: Edit comment with error message
if: steps.scd.outputs.error-message
uses: peter-evans/create-or-update-comment@v1
with:
comment-id: ${{ github.event.comment.id }}
body: |
> Error!: ${{ steps.scd.outputs.error-message }}
- name: Checkout Airbyte
id: checkout
if: failure() || steps.scd.outputs.error-message
uses: actions/checkout@v2
- name: Run get_repo_admins.sh
if: failure() || steps.scd.outputs.error-message
id: repo_admins
run: |
echo "REPO_ADMINS=$(./tools/bin/get_repo_admins.sh ${{ secrets.GH_PAT_APPROVINGTON_OCTAVIA }} airbytehq/airbyte)" >> $GITHUB_ENV
- name: Edit comment with repo admins
if: failure() || steps.scd.outputs.error-message
uses: peter-evans/create-or-update-comment@v1
with:
comment-id: ${{ github.event.comment.id }}
body: |
>
> Important: This command can only be run by one of the repository admins:
> ${{ env.REPO_ADMINS }}

19
tools/bin/get_repo_admins.sh Executable file
View File

@@ -0,0 +1,19 @@
#!/bin/bash
# Check if the correct number of arguments is provided
if [ "$#" -ne 2 ]; then
echo "Usage: $0 <personal_access_token> <repository>"
exit 1
fi
# Assign arguments to variables
TOKEN="$1"
REPO="$2"
# GitHub API URL for repository collaborators
API_URL="https://api.github.com/repos/$REPO/collaborators"
# Curl command to get the list of collaborators with admin rights
curl -H "Authorization: token $TOKEN" \
-H "Accept: application/vnd.github.v3+json" \
"$API_URL" | jq '.[] | select(.permissions.admin == true) | "[\(.login)](\(.html_url)),"' | tr -d '"' | paste -sd " " -