1
0
mirror of synced 2025-12-30 03:01:36 -05:00

Prefix use of composite action with a checkout (#44582)

This commit is contained in:
Hector Alfaro
2023-10-17 16:32:51 -04:00
committed by GitHub
parent 1af1c0302b
commit 02611c8d6f
26 changed files with 104 additions and 17 deletions

View File

@@ -66,7 +66,8 @@ jobs:
console.error(`Failed to lock the pull request. Error: ${error}`)
throw error
}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -9,7 +9,7 @@ on:
types: [opened]
permissions:
contents: none
contents: read
jobs:
spammy-title-check:
@@ -81,6 +81,8 @@ jobs:
console.log(error);
}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -61,6 +61,8 @@ jobs:
body: "Please leave this `repo-sync` branch to the robots!\n\nI'm going to close this pull request now, but feel free to open a new issue or ask any questions in [discussions](https://github.com/github/docs/discussions)!"
})
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -11,6 +11,7 @@ on:
types: [labeled]
permissions:
contents: read
issues: write
pull-requests: write
@@ -32,6 +33,8 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: gh pr close ${{ github.event.pull_request.html_url }}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -14,7 +14,7 @@ on:
- opened
permissions:
contents: none
contents: read
jobs:
check-team-membership:
@@ -80,6 +80,8 @@ jobs:
bot-token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
text: <@${{github.actor}}> opened https://github.com/github/docs/issues/${{ github.event.number || github.event.issue.number }} publicly on the github/docs repo instead of a private repo. They have been notified via a new issue in the private repo to confirm this was intentional.
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -10,7 +10,7 @@ on:
- labeled
permissions:
contents: none
contents: read
jobs:
transfer-issue:
@@ -71,6 +71,8 @@ jobs:
NEW_ISSUE: ${{ env.NEW_ISSUE }}
OLD_ISSUE: ${{ github.event.issue.html_url }}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -12,6 +12,7 @@ on:
permissions:
issues: write
pull-requests: write
contents: read
jobs:
comment:
@@ -27,6 +28,8 @@ jobs:
body: "Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours. If you're looking for your next contribution, check out our [help wanted issues](https://github.com/github/docs/issues?q=is%3Aopen+is%3Aissue+label%3A%22help+wanted%22) :zap:"
})
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -8,7 +8,7 @@ on:
workflow_dispatch:
permissions:
contents: none
contents: read
jobs:
transfer_issues:
@@ -24,7 +24,7 @@ jobs:
script: |
const owner = 'github'
const originalRepo = 'docs-internal'
let correctRepo = process.env.TEAM_ENGINEERING_REPO
let correctRepo = process.env.TEAM_ENGINEERING_REPO
const correctRepoObject = await github.rest.repos.get({
owner: owner,
@@ -58,15 +58,15 @@ jobs:
}
}
}`
const variables = {
id: issueNodeId,
repositoryId: correctRepositoryNodeId
}
const graph = await github.graphql(mutation, variables)
console.log('GraphQL mutation result:\n' + JSON.stringify(graph))
// Add the same labels to the new issue
const newIssueNumber = graph.transferIssue.issue.number
await github.rest.issues.addLabels({
@@ -78,6 +78,8 @@ jobs:
}
}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -10,7 +10,7 @@ on:
- labeled
permissions:
contents: none
contents: read
jobs:
move_issues:
@@ -27,6 +27,8 @@ jobs:
column: Help wanted
repo-token: ${{ secrets.DOCS_BOT_PAT_WORKFLOW_READORG }}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -12,7 +12,7 @@ on:
- reopened
permissions:
contents: none
contents: read
jobs:
transfer_issue:
@@ -89,6 +89,8 @@ jobs:
labels: context.payload.issue.labels.map(label => label.name),
})
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -10,6 +10,7 @@ on:
- reopened
permissions:
contents: read
repository-projects: write
jobs:
@@ -42,6 +43,8 @@ jobs:
console.log(e);
}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -9,6 +9,7 @@ on:
- cron: '20 16 * * *' # Run each day at 16:20 UTC / 8:20 PST
permissions:
contents: read
issues: write
pull-requests: write
@@ -30,6 +31,8 @@ jobs:
stale-pr-label: SME stale
days-before-pr-close: -1 # never close
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -11,6 +11,7 @@ on:
types: [labeled]
permissions:
contents: read
issues: write
pull-requests: write

View File

@@ -15,6 +15,7 @@ on:
- cron: '20 * * * *' # Run each hour at 20 minutes past
permissions:
contents: read
issues: write
pull-requests: write
@@ -47,6 +48,8 @@ jobs:
if you have the information we requested, or open a [new issue](https://github.com/github/docs/issues/new/choose)
to describing your changes. Then we can begin the review process.
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -10,6 +10,7 @@ on:
- opened
permissions:
contents: read
pull-requests: write
jobs:
@@ -63,6 +64,8 @@ jobs:
console.log(e);
}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -10,7 +10,7 @@ on:
types: remove_from_docs_FR_board
permissions:
contents: none
contents: read
jobs:
remove_from_FR_board:
@@ -30,6 +30,8 @@ jobs:
GITHUB_TOKEN: ${{secrets.DOCS_BOT_PAT_WORKFLOW_READORG}}
PR_URL: https://github.com/${{ github.event.client_payload.command.repository.full_name }}/pull/${{ github.event.client_payload.command.resource.number }}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -9,9 +9,12 @@ on:
types: [opened]
paths:
- data/secret-scanning.yml
permissions:
contents: read
pull-requests: write
repository-projects: write
jobs:
Process-secret-scanning-PR:
runs-on: ubuntu-latest
@@ -30,13 +33,13 @@ jobs:
in the _/data/secret-scanning.yml_ file. The data in this file is used
to populate the tables in the '[Secret scanning
patterns](https://docs.github.com/en/code-security/secret-scanning/secret-scanning-patterns#supported-secrets)' article at build time.
- The secret scanning team updates this file fairly regularly, and raises PRs in the `docs-internal` repository to update our docs accordingly. We've agreed to review these PRs **quickly** as the changes are already effective when these PRs reach us.
- Anyone in the Docs Content team can review and merge this PR. A few guidelines:
- You can only merge this PR if it's had a technical review (see who's approved it in the 'Reviewers' section in the top right corner).
- To test that the changes appear on Staging, look at the preview of the 'Secret scanning patterns' file. You may need to use the product picker to look at the table for different GitHub products, and test the versioning.
- If you don't feel comfortable reviewing this PR, please post a link to it in the #code-security-docs Slack channel so someone from the Dependencies & Secrets focus team can take a look.
- If you don't feel comfortable reviewing this PR, please post a link to it in the #code-security-docs Slack channel so someone from the Dependencies & Secrets focus team can take a look.
- For more information about this automation, and the reasons why we have decided to implement it, see [About automations for Dependencies & Secrets](https://github.com/github/docs-content/blob/main/focus-areas/code-security/about-automations-for-dependencies-and-secrets.md#secret-scanning-prs-adding-new-supported-patterns) in the 'docs-content' repository.

View File

@@ -10,7 +10,7 @@ on:
permissions:
pull-requests: write
contents: none
contents: read
jobs:
run:
@@ -29,6 +29,8 @@ jobs:
<@github/site-policy-admins>, when these changes are ready to be synced to the site policy repo for the 24-hour or 30-day [review window](https://github.com/github/site-policy#whats-the-process), run the [site policy sync action](https://github.com/github/docs-internal/actions/workflows/site-policy-sync.yml) from this PR's branch. When these changes are ready to be merged in `docs-internal`, let the Docs team know on Slack in #docs-content and a writer will merge this PR.
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -9,6 +9,7 @@ on:
- cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:20 PST
permissions:
contents: read
issues: write
pull-requests: write
@@ -31,6 +32,8 @@ jobs:
operations-per-run: 1000
close-issue-reason: not_planned
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -10,7 +10,7 @@ on:
- labeled
permissions:
contents: none
contents: read
jobs:
transfer-issue:
@@ -57,6 +57,8 @@ jobs:
GITHUB_TOKEN: ${{secrets.DOCS_BOT_PAT_WORKFLOW_READORG}}
OLD_ISSUE: ${{ github.event.issue.html_url }}
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -10,6 +10,7 @@ on:
- created
permissions:
contents: read
issues: write
jobs:
@@ -47,6 +48,8 @@ jobs:
add-labels: 'triage'
ignore-if-labeled: true
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -11,6 +11,7 @@ on:
- opened
permissions:
contents: read
issues: write
jobs:
@@ -24,6 +25,8 @@ jobs:
with:
add-labels: 'triage'
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -11,6 +11,7 @@ on:
- opened
permissions:
contents: read
issues: write
pull-requests: write
@@ -25,6 +26,8 @@ jobs:
with:
add-labels: 'triage'
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -9,6 +9,7 @@ on:
- cron: '20 16 * * 1-5' # Run every weekday at 16:20 UTC / 8:20 PST
permissions:
contents: read
issues: write
pull-requests: write
@@ -31,6 +32,8 @@ jobs:
stale-pr-label: 'stale'
exempt-pr-labels: 'waiting for review,never-stale,ready to merge'
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}
@@ -55,6 +58,8 @@ jobs:
stale-pr-label: 'waiting for review'
exempt-pr-labels: 'never-stale'
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}

View File

@@ -20,6 +20,7 @@ on:
- 'content/actions/deployment/security-hardening-your-deployments/**'
permissions:
contents: read
pull-requests: write
jobs:
@@ -101,6 +102,8 @@ jobs:
core.setFailed(workflowFailMessage)
- name: Check out repo
uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
- uses: ./.github/actions/slack-alert
with:
slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}