Files
containers/.github/workflows/pr-reviews.yml
Fran Mulero 9ee3dd95f7 [bitnami/containers] review and improve workflow permissions (#35293)
* [bitnami/containers] review and improve workflow permissions

Signed-off-by: Fran Mulero <fmulero@vmware.com>

* Fix typo

Signed-off-by: Fran Mulero <fmulero@vmware.com>

---------

Signed-off-by: Fran Mulero <fmulero@vmware.com>
2023-05-26 16:02:34 +02:00

43 lines
1.5 KiB
YAML
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
name: '[Support] Review based card movements'
on:
pull_request:
types:
- review_requested
- synchronize
permissions:
repository-projects: write
contents: read
issues: read
pull-requests: read
concurrency:
group: card-movement-${{ github.event.number }}
jobs:
handler:
runs-on: ubuntu-latest
# This job will ignore:
# * Events triggered by bitnami-bot (README commits for example).
# * Events triggered over automated PRs (They are managed in comments.yml workflow).
# * PRs with 'bitnami' label.
if: |
github.actor != 'bitnami-bot' && github.event.pull_request.user.login != 'bitnami-bot' &&
(!contains(github.event.pull_request.labels.*.name, 'bitnami')) && (!contains(github.event.pull_request.labels.*.name, 'triage'))
steps:
- name: Repo checkout
uses: actions/checkout@v3
with:
# Checkout from base to try to get latest information from the main branch.
ref: ${{ github.event.pull_request.base.ref }}
repository: ${{ github.event.pull_request.base.repo.full_name }}
- name: Load .env file
uses: xom9ikk/dotenv@v2
with:
path: .github/workflows/
- name: Move into In Progress
# Move the card only if the actor is not a Bitnami member
if: ${{ !contains(fromJson(env.BITNAMI_TEAM), github.actor) }}
uses: peter-evans/create-or-update-project-card@v2
with:
project-name: Support
column-name: In progress
issue-number: ${{ github.event.number }}