check-external-contributor.yml

name: Check External Contributor

on:
  workflow_call:
    inputs:
      github_team_slug:
        type: string
        required: true
        description: "GitHub team slug to check membership against (e.g., 'devs')"
      label_name:
        type: string
        required: false
        default: "external contributor"
        description: "Label to add to PR if creator is not in the team"
    secrets:
      GITHUB_TOKEN:
        required: true

permissions:
  pull-requests: write

jobs:
  check-contributor:
    name: Check PR Creator Team Membership
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    steps:
      - name: Check if PR creator is in team
        id: check-team
        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
        with:
          script: |
            const { data: teams } = await github.rest.teams.listMembershipsForAuthenticatedUser();
            const teamSlugs = teams.map(team => team.slug);
            const teamSlug = '${{ inputs.github_team_slug }}';

            const isMember = teamSlugs.includes(teamSlug);
            console.log(`Looking for team: ${teamSlug}`);
            console.log(`User's teams: ${teamSlugs.join(', ')}`);
            console.log(`Is member: ${isMember}`);

            core.setOutput('is_member', isMember);

      - name: Add external contributor label
        if: steps.check-team.outputs.is_member == 'false'
        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
        with:
          script: |
            const labelName = '${{ inputs.label_name }}';
            github.rest.issues.addLabels({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.issue.number,
              labels: [labelName]
            });
            console.log(`Added label "${labelName}" to PR #${context.issue.number}`);