-
-
Notifications
You must be signed in to change notification settings - Fork 7
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
ci: update of files from global .github repo (#228)
- Loading branch information
1 parent
5d51590
commit bd386a5
Showing
1 changed file
with
90 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,90 @@ | ||
# This workflow is centrally managed at https://github.com/asyncapi/.github/ | ||
# Don't make changes to this file in this repository, as they will be overwritten with | ||
# changes made to the same file in the abovementioned repository. | ||
|
||
# The purpose of this workflow is to allow Bounty Team members | ||
# (https://github.com/orgs/asyncapi/teams/bounty_team) to issue commands to the | ||
# organization's global AsyncAPI bot related to the Bounty Program, while at the | ||
# same time preventing unauthorized users from misusing them. | ||
|
||
name: Bounty Program commands | ||
|
||
on: | ||
issue_comment: | ||
types: | ||
- created | ||
|
||
jobs: | ||
guard-against-unauthorized-use: | ||
if: > | ||
github.actor != ('aeworxet' || 'thulieblack') && | ||
( | ||
contains(github.event.comment.body, '/bounty' ) | ||
) | ||
runs-on: ubuntu-latest | ||
|
||
steps: | ||
- name: ❌ @${{github.actor}} made an unauthorized attempt to use a Bounty Program's command | ||
uses: actions/github-script@v6 | ||
|
||
with: | ||
github-token: ${{ secrets.GH_TOKEN }} | ||
script: | | ||
const commentText = `❌ @${{github.actor}} is not authorized to use the Bounty Program's commands. | ||
These commands can only be used by members of the [Bounty Team](https://github.com/orgs/asyncapi/teams/bounty_team).`; | ||
console.log(`❌ @${{github.actor}} made an unauthorized attempt to use a Bounty Program's command.`); | ||
github.rest.issues.createComment({ | ||
issue_number: context.issue.number, | ||
owner: context.repo.owner, | ||
repo: context.repo.repo, | ||
body: commentText | ||
}) | ||
add-label-bounty: | ||
if: > | ||
github.actor == ('aeworxet' || 'thulieblack') && | ||
( | ||
contains(github.event.comment.body, '/bounty' ) | ||
) | ||
runs-on: ubuntu-latest | ||
env: | ||
BOUNTY_PROGRAM_LABELS_JSON: | | ||
[ | ||
{"name": "bounty", "color": "0e8a16", "description": "Participation in the Bounty Program"} | ||
] | ||
steps: | ||
- name: Add label `bounty` | ||
uses: actions/github-script@v6 | ||
|
||
with: | ||
github-token: ${{ secrets.GH_TOKEN }} | ||
script: | | ||
const BOUNTY_PROGRAM_LABELS = JSON.parse(process.env.BOUNTY_PROGRAM_LABELS_JSON); | ||
let LIST_OF_LABELS_FOR_REPO = await github.rest.issues.listLabelsForRepo({ | ||
owner: context.repo.owner, | ||
repo: context.repo.repo, | ||
}); | ||
LIST_OF_LABELS_FOR_REPO = LIST_OF_LABELS_FOR_REPO.data.map(key => key.name); | ||
if (!LIST_OF_LABELS_FOR_REPO.includes(BOUNTY_PROGRAM_LABELS[0].name)) { | ||
await github.rest.issues.createLabel({ | ||
owner: context.repo.owner, | ||
repo: context.repo.repo, | ||
name: BOUNTY_PROGRAM_LABELS[0].name, | ||
color: BOUNTY_PROGRAM_LABELS[0].color, | ||
description: BOUNTY_PROGRAM_LABELS[0].description | ||
}); | ||
} | ||
console.log('Adding label `bounty`...'); | ||
github.rest.issues.addLabels({ | ||
issue_number: context.issue.number, | ||
owner: context.repo.owner, | ||
repo: context.repo.repo, | ||
labels: [BOUNTY_PROGRAM_LABELS[0].name] | ||
}) |