integrations-core/.github/workflows/backport-pr.yml at eda03ecc792b8325e3c0d49178d357997056bea9 · ConnectionMaster/integrations-core · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: Backport PR
on:
  pull_request_target:
    types:
      - closed
      - labeled

jobs:
  backport:
    name: Backport PR
    runs-on: ubuntu-latest
    permissions:
      id-token: write  # Required for OIDC token federation with dd-octo-sts
      contents: read
    if: >
      github.event.pull_request.merged
      && (
        github.event.action == 'closed'
        || (
          github.event.action == 'labeled'
          && contains(github.event.label.name, 'backport')
        )
      )
    steps:
      - name: Get GitHub token via dd-octo-sts
        uses: DataDog/dd-octo-sts-action@acaa02eee7e3bb0839e4272dacb37b8f3b58ba80 # v1.0.3
        id: octo-sts
        with:
          scope: DataDog/integrations-core
          policy: self.backport.pull-request-target
      - uses: tibdex/backport@9565281eda0731b1d20c4025c43339fb0a23812e # v2.0.4
        with:
          label_pattern: "^backport/(?<base>([^ ]+))$"
          labels_template: "[\"backport\", \"bot\"]"
          body_template: |
            Backport <%= mergeCommitSha %> from #<%= number %>.

            ___

            <%= body %>
          github_token: ${{ steps.octo-sts.outputs.token }}