React to product-owners.yml changes

.github/labels.yml

@@ -156,7 +156,7 @@
 # Product Areas - notion.so/sentry/473791bae5bf43399d46093050b77bf0
 - name: 'Product Area: Unknown'
   color: '8D5494'
-- name: 'Product Area: Sign in'
+- name: 'Product Area: Sign In'
   color: '8D5494'
 - name: 'Product Area: Issues'
   color: '8D5494'
@@ -208,12 +208,10 @@
   color: '8D5494'
 - name: 'Product Area: Help'
   color: '8D5494'
-- name: 'Product Area: What’s new'
+- name: "Product Area: What's New"
   color: '8D5494'
 - name: 'Product Area: Footer'
   color: '8D5494'
-- name: 'Product Area: Other'
-  color: '8D5494'
 - name: 'Product Area: SDKs - Web Frontend'
   color: '8D5494'
 - name: 'Product Area: SDKs - Web Backend'
@@ -224,6 +222,8 @@
   color: '8D5494'
 - name: 'Product Area: Docs'
   color: '8D5494'
+- name: 'Product Area: Other'
+  color: '8D5494'
 
 # Teams
 - name: 'Team: Crons'

.github/workflows/react-to-product-owners-yml-changes.yml

@@ -0,0 +1,29 @@
+name: React to product-owners.yml changes
+on:
+  # This could be run manually, but the general expectation is that this fires
+  # from GHA in getsentry/security-as-code on changes there.
+
+  workflow_dispatch:
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    name: React to product-owners.yml changes
+    steps:
+      - uses: actions/checkout@v2
+
+      - uses: getsentry/[email protected]
+        with:
+          python-version: 3.11.3
+
+      - name: Get an auth token
+        id: token
+        uses: getsentry/[email protected]
+        with:
+          app_id: ${{ secrets.SENTRY_INTERNAL_APP_ID }}
+          private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }}
+
+      - name: React to product-owners.yml changes
+        shell: bash
+        env:
+          GITHUB_TOKEN: ${{ steps.token.outputs.token }}
+        run: ./bin/react-to-product-owners-yml-changes.sh

bin/react-to-product-owners-yml-changes.py

@@ -0,0 +1,47 @@
+#!/usr/bin/env python3
+
+import os, sys, yaml
+from os.path import realpath, join, dirname
+
+# Run from project root.
+os.chdir(realpath(join(dirname(sys.argv[0]), '..')))
+
+PREFIX = 'Product Area: '
+LABELS_YAML = '.github/labels.yml'
+
+product_owners = yaml.safe_load(open(sys.argv[1]))
+labels = open(LABELS_YAML)
+
+fastforward = False
+head = []
+product_areas = ["- name: 'Product Area: Unknown'\n", "  color: '8D5494'\n"]
+tail = []
+current = head
+
+# Best to look the other way, Buck. This is just waaaay easier than trying to
+# use ruamel.yaml to preserve comments and other formatting.
+
+for line in labels:
+    if line == '\n':
+        fastforward = False
+    elif fastforward:
+        continue
+    elif line.startswith("- name: 'Product Area: "):
+        fastforward = True
+        current = tail
+        continue
+    current.append(line)
+
+for area in product_owners['by_area']:
+    if "'" in area:
+        product_areas.append(f'- name: "Product Area: {area}"\n')
+    else:
+        product_areas.append(f"- name: 'Product Area: {area}'\n")
+    product_areas.append(f"  color: '8D5494'\n")
+
+product_areas += ["- name: 'Product Area: Other'\n", "  color: '8D5494'\n"]
+
+with open('.github/labels.yml', 'w+') as fp:
+    fp.writelines(head)
+    fp.writelines(product_areas)
+    fp.writelines(tail)

bin/react-to-product-owners-yml-changes.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")"
+cd ..
+gh repo clone https://github.com/getsentry/security-as-code /tmp/security-as-code
+sha=$(git -C /tmp/security-as-code rev-parse @)
+pip3 install pyyaml==6.0
+./bin/react-to-product-owners-yml-changes.py /tmp/security-as-code/rbac/lib/product-owners.yml
+branch="getsantry/update-product-area-labels-${sha:0:8}"
+git checkout -b "$branch"
+git add .
+git commit -m "Sync with product-owners.yml in security-as-code@${sha:0:8}"
+git push --set-upstream origin "$branch"
+gh pr create --fill
+gh pr merge --squash --auto