mirror of
https://github.com/neondatabase/neon.git
synced 2026-05-19 06:00:38 +00:00
fc3d372f3a
## Problem `author_association` doesn't properly work if a GitHub user decides not to show affiliation with the org in their profile (i.e. if it's private) ## Summary of changes - Call `/orgs/ORG/members/USERNAME` API to check whether a PR/issue author is a member of the org
55 lines
1.6 KiB
YAML
55 lines
1.6 KiB
YAML
name: Add `external` label to issues and PRs created by external users
|
|
|
|
on:
|
|
issues:
|
|
types:
|
|
- opened
|
|
pull_request:
|
|
types:
|
|
- opened
|
|
|
|
# No permission for GITHUB_TOKEN by default; the **minimal required** set of permissions should be granted in each job.
|
|
permissions: {}
|
|
|
|
env:
|
|
LABEL: external
|
|
|
|
jobs:
|
|
check-user:
|
|
runs-on: ubuntu-22.04
|
|
|
|
outputs:
|
|
is-member: ${{ steps.check-user.outputs.is-member }}
|
|
|
|
steps:
|
|
- name: Check whether `${{ github.actor }}` is a member of `${{ github.repository_owner }}`
|
|
id: check-user
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
if gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" "/orgs/${GITHUB_REPOSITORY_OWNER}/members/${GITHUB_ACTOR}"; then
|
|
is_member=true
|
|
else
|
|
is_member=false
|
|
fi
|
|
|
|
echo "is-member=${is_member}" | tee -a ${GITHUB_OUTPUT}
|
|
|
|
add-label:
|
|
if: needs.check-user.outputs.is-member == 'false'
|
|
needs: [ check-user ]
|
|
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
pull-requests: write # for `gh pr edit`
|
|
issues: write # for `gh issue edit`
|
|
|
|
steps:
|
|
- name: Label new ${{ github.event_name }}
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
ITEM_NUMBER: ${{ github.event[github.event_name == 'pull_request' && 'pull_request' || 'issue'].number }}
|
|
GH_CLI_COMMAND: ${{ github.event_name == 'pull_request' && 'pr' || 'issue' }}
|
|
run: |
|
|
gh ${GH_CLI_COMMAND} --repo ${GITHUB_REPOSITORY} edit --add-label=${LABEL} ${ITEM_NUMBER}
|