mv verify script to scripts/ dir

Author: rafaelespinoza

.github/scripts/verify-all-pr-workflow-checks-passed.sh

@@ -0,0 +1,35 @@
+#!/bin/bash
+set -eu -o pipefail
+
+declare -r expected_sha="${1:?missing expected_sha}"
+declare -r gh_pr_number="${2:?missing gh_pr_number}"
+declare -r gh_repository="${3:?missing gh_repository}"
+declare -r gh_current_run_id="${4:?missing gh_current_run_id}"
+
+# 1. Fetch current PR HEAD SHA to ensure no new commit was pushed while this ran
+CURRENT_SHA=$(gh pr view "${gh_pr_number}" \
+	--repo "${gh_repository}" \
+	--json headRefOid --jq '.headRefOid')
+
+if [ "${CURRENT_SHA}" != "${expected_sha}" ]; then
+	echo "A new commit (${CURRENT_SHA}) was pushed after this run started (${expected_sha}). Aborting auto-merge."
+	exit 1
+fi
+
+# 2. Allowlist filter: select any check whose state is NOT in [SUCCESS, SKIPPED, NEUTRAL],
+#   filtering out the current workflow run by checking if its link contains gh_current_run_id.
+NON_PASSING_CHECKS=$(gh pr checks "${gh_pr_number}" \
+	--repo "${gh_repository}" \
+	--json workflow,name,state,link |
+	jq --compact --arg current_run_id "${gh_current_run_id}" \
+		'.[] | select(
+       (.link | contains($current_run_id) | not)
+       and
+       (.state | test("^(SUCCESS|SKIPPED|NEUTRAL)$") | not)
+     )')
+
+if [ -n "${NON_PASSING_CHECKS}" ]; then
+	echo "Cannot auto-merge. The following checks are not passing:"
+	echo "${NON_PASSING_CHECKS}" | jq -r '"workflow: \(.workflow), name: \(.name), state: \(.state)""'
+	exit 1
+fi

.github/workflows/pr-quality-check.yaml

@@ -143,37 +143,11 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           EXPECTED_SHA: ${{ github.event.pull_request.head.sha }}
         run: |
-          declare -r gh_pr_number='${{ github.event.pull_request.number }}'
-          declare -r gh_repository='${{ github.repository }}'
-          declare -r gh_current_run_id='${{ github.run_id }}'
-
-          # 1. Fetch current PR HEAD SHA to ensure no new commit was pushed while this ran
-          CURRENT_SHA=$(gh pr view "${gh_pr_number}" \
-            --repo "${gh_repository}" \
-            --json headRefOid --jq '.headRefOid')
-
-          if [ "${CURRENT_SHA}" != "${EXPECTED_SHA}" ]; then
-            echo "A new commit (${CURRENT_SHA}) was pushed after this run started (${EXPECTED_SHA}). Aborting auto-merge."
-            exit 1
-          fi
-
-          # 2. Allowlist filter: select any check whose state is NOT in [SUCCESS, SKIPPED, NEUTRAL],
-          #   filtering out the current workflow run by checking if its link contains gh_current_run_id.
-          NON_PASSING_CHECKS=$(gh pr checks "${gh_pr_number}" \
-            --repo "${gh_repository}" \
-            --json workflow,name,state,link |
-            jq --compact --arg current_run_id "${gh_current_run_id}" \
-              '.[] | select(
-                 (.link | contains($current_run_id) | not)
-                 and
-                 (.state | test("^(SUCCESS|SKIPPED|NEUTRAL)$") | not)
-               )')
-
-          if [ -n "${NON_PASSING_CHECKS}" ]; then
-            echo "Cannot auto-merge. The following checks are not passing:"
-            echo "${NON_PASSING_CHECKS}" | jq -r '"workflow: \(.workflow), name: \(.name), state: \(.state)""'
-            exit 1
-          fi
+          ${{ github.workspace }}/.github/scripts/verify-all-pr-workflow-checks-passed.sh \
+            '${{ github.event.pull_request.head.sha }}' \
+            '${{ github.event.pull_request.number }}' \
+            '${{ github.repository }}' \
+            '${{ github.run_id }}'
 
       - name: Enable auto-merge via squash
         env: