try reusable workflow #221
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Workflow to check if a user is eligible to contribute or needs to sign the CLA | |
| name: CLA Check Reusable Workflow | |
| on: | |
| workflow_call: | |
| jobs: | |
| check-membership: | |
| name: Check Membership | |
| runs-on: ubuntu-latest | |
| # Dont run this workflow if it was triggered by one of these bots | |
| # Don't run it during a merge queue, as it can't correctly identify the actor | |
| if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.user.login != 'github-actions[bot]' && github.event_name != 'merge_group' }} | |
| outputs: | |
| is_member: ${{ steps.check-membership.outputs.is_member}} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: 'dfinity/public-workflows' | |
| - name: Install Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.10' | |
| - name: Install Dependencies | |
| run: pip install -r requirements.txt | |
| - name: Check Membership | |
| id: check-membership | |
| run: python reusable_workflows/check_membership/check_membership.py | |
| shell: bash | |
| env: | |
| GH_TOKEN: ${{ secrets.CLA_READ_ORG_MEMBERSHIP }} | |
| GH_ORG: ${{ github.repository_owner }} | |
| USER: ${{ github.event.pull_request.user.login }} | |
| check-external-contributions: | |
| name: Check External Contributions | |
| runs-on: ubuntu-latest | |
| needs: check-membership | |
| if: ${{ needs.check-membership.outputs.is_member != 'true' && needs.check-membership.result == 'success' }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: 'dfinity/public-workflows' | |
| - name: Install Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.10' | |
| - name: Install Dependencies | |
| run: pip install -r requirements.txt | |
| - name: Check if accepting external contributions | |
| id: accepts_external_contrib | |
| run: | | |
| export PYTHONPATH="$PWD/reusable_workflows/" | |
| python reusable_workflows/check_membership/check_external_contrib.py | |
| shell: bash | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| REPO: ${{ github.event.repository.name }} | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| ref: ${{ github.event.pull_request.head.ref }} | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| - name: Close Pull Request | |
| id: close_pr | |
| if: ${{ steps.accepts_external_contrib.outputs.accepts_contrib != 'true' }} | |
| uses: superbrothers/close-pull-request@v3 | |
| with: | |
| comment: | | |
| "This repository does not accept external contributions yet. | |
| We are therefore closing this Pull Request, thank you for your understanding. | |
| — The DFINITY Foundation" | |
| - name: Add Label | |
| uses: actions-ecosystem/action-add-labels@v1 | |
| if: ${{ steps.accepts_external_contrib.outputs.accepts_contrib != 'false' }} | |
| with: | |
| labels: external-contributor | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| if: ${{ steps.accepts_external_contrib.outputs.accepts_contrib != 'false' }} | |
| with: | |
| repository: 'dfinity/public-workflows' | |
| - name: Check CLA | |
| id: check-cla | |
| run: | | |
| export PYTHONPATH="$PWD/reusable_workflows/" | |
| python reusable_workflows/check_cla/check_cla_pr.py | |
| shell: bash | |
| if: ${{ steps.accepts_external_contrib.outputs.accepts_contrib != 'false' }} | |
| env: | |
| GH_ORG: ${{ github.repository_owner }} | |
| GH_TOKEN: ${{ secrets.CLA_COMMENT_ON_PRS }} | |
| REPO: ${{ github.event.repository.name }} | |
| PR_ID: ${{ github.event.number }} |