FilesExpand file tree

main

/

trusted-review-gate.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

37 lines (34 loc) · 983 Bytes

main

/

trusted-review-gate.yml

Copy path

Top

File metadata and controls

• Code
• Blame

37 lines (34 loc) · 983 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

name: trusted-review-gate

on:

workflow_run:

workflows: [review-policy-signal]

types: [completed]

schedule:

- cron: '*/15 * * * *'

workflow_dispatch:

inputs:

pull_number:

description: PR number to re-evaluate

required: true

type: number

# Only trusted default-branch code runs with status-write permission.

permissions:

contents: read

pull-requests: read

statuses: write

jobs:

publish-maintainer-decision:

runs-on: ubuntu-24.04

timeout-minutes: 5

steps:

- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

ref: main

persist-credentials: false

- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0

with:

python-version: "3.12"

- name: Check author and current approval using GitHub REST

env:

GH_TOKEN: ${{ github.token }}

run: python3 scripts/trusted_review_gate.py