Bump peter-evans/create-issue-from-file from b4f9ee0a9d4abbfc6986601d9b1a4f8f8e74c77e to f5b35febed343f15bab5ec6f4daa012649f538ad #1316
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Confirm internal staff meant to post in public | |
| # **What it does**: If a GitHub staff makes an issue/pull request in the open-source repo, creates an issue in the internal one to verify intent. | |
| # **Why we have it**: We don't want GitHub staff accidentally making issues/pull requests in the wrong repository. | |
| # **Who does it impact**: GitHub staff. | |
| on: | |
| issues: | |
| types: | |
| - opened | |
| - transferred | |
| pull_request_target: | |
| types: | |
| - opened | |
| jobs: | |
| check-team-membership: | |
| runs-on: ubuntu-latest | |
| continue-on-error: true | |
| if: github.repository == 'github/docs' && github.actor != 'docs-bot' | |
| steps: | |
| - id: membership_check | |
| uses: actions/github-script@2b34a689ec86a68d8ab9478298f91d5401337b7d | |
| env: | |
| TEAM_CONTENT_REPO: ${{ secrets.TEAM_CONTENT_REPO }} | |
| with: | |
| github-token: ${{ secrets.DOCUBOT_READORG_REPO_WORKFLOW_SCOPES }} | |
| script: | | |
| // Only perform this action with GitHub employees | |
| try { | |
| await github.teams.getMembershipForUserInOrg({ | |
| org: 'github', | |
| team_slug: 'employees', | |
| username: context.payload.sender.login, | |
| }); | |
| } catch(err) { | |
| // An error will be thrown if the user is not a GitHub employee | |
| // If a user is not a GitHub employee, we should stop here and | |
| // Not send a notification | |
| return | |
| } | |
| // Don't perform this action with Docs team members | |
| try { | |
| await github.teams.getMembershipForUserInOrg({ | |
| org: 'github', | |
| team_slug: 'docs', | |
| username: context.payload.sender.login, | |
| }); | |
| // If the user is a Docs team member, we should stop here and not send | |
| // a notification | |
| return | |
| } catch(err) { | |
| // An error will be thrown if the user is not a Docs team member | |
| // If a user is not a Docs team member we should continue and send | |
| // the notification | |
| } | |
| const issueNo = context.number || context.issue.number | |
| // Create an issue in our private repo | |
| await github.issues.create({ | |
| owner: 'github', | |
| repo: process.env.TEAM_CONTENT_REPO, | |
| title: `@${context.payload.sender.login} confirm that \#${issueNo} should be in the public github/docs repo`, | |
| body: `@${context.payload.sender.login} opened https://github.com/github/docs/issues/${issueNo} publicly in the github/docs repo, instead of the private github/${process.env.TEAM_CONTENT_REPO} repo.\n\n@${context.payload.sender.login}, please confirm that this belongs in the public repo and that no sensitive information was disclosed by commenting below and closing the issue.\n\nIf this was not intentional and sensitive information was shared, please delete https://github.com/github/docs/issues/${issueNo} and notify us in the \#docs-open-source channel.\n\nThanks!`, | |
| labels: ['OS confirmation'], | |
| }); | |
| core.setOutput('did_warn', 'true') | |
| - name: Send Slack notification if a GitHub employee who isn't on the docs team opens an issue in public | |
| if: ${{ steps.membership_check.outputs.did_warn && github.repository == 'github/docs' }} | |
| uses: someimportantcompany/github-actions-slack-message@0b470c14b39da4260ed9e3f9a4f1298a74ccdefd | |
| with: | |
| channel: ${{ secrets.DOCS_OPEN_SOURCE_SLACK_CHANNEL_ID }} | |
| bot-token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }} | |
| text: <@${{github.actor}}> opened https://github.com/github/docs/issues/${{ github.event.number || github.event.issue.number }} publicly on the github/docs repo instead of a private repo. They have been notified via a new issue in the private repo to confirm this was intentional. |