From 2a780be55b9a39dff61fd0d0cdf88e49183de5b7 Mon Sep 17 00:00:00 2001
From: "James M. Greene" <JamesMGreene@github.com>
Date: Tue, 10 Nov 2020 23:57:28 -0600
Subject: [PATCH] Prevent merging to main branch during repo freezes (#16278)

* Prevent merging to main branch during repo freezes

* Update failure wording to indicate merges are 'paused'

* Clarify the merge pauses are only for the 'main' branch
---
 .github/workflows/repo-freeze-check.yml | 27 +++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 .github/workflows/repo-freeze-check.yml

diff --git a/.github/workflows/repo-freeze-check.yml b/.github/workflows/repo-freeze-check.yml
new file mode 100644
index 0000000000..1ea8d4b3c3
--- /dev/null
+++ b/.github/workflows/repo-freeze-check.yml
@@ -0,0 +1,27 @@
+name: Repo Freeze Check
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+      - ready_for_review
+      - unlocked
+    branches:
+      - main
+
+env:
+  FREEZE: ${{ secrets.FREEZE }}
+
+jobs:
+  check-freezer:
+    name: Prevent merging during deployment freezes
+    runs-on: ubuntu-latest
+    steps:
+
+    - name: Fail if repo merges are paused
+      if: ${{ env.FREEZE == 'true' }}
+      run: |
+        echo 'Merges into the "main" branch on this repo are currently paused!'
+        exit 1