add comment to PR

Author: dasormeter

.github/workflows/blackduck.yml

@@ -3,10 +3,12 @@ defaults:
   run:
     shell: bash -euo pipefail -c "source nix.source && source .envrc.vars && exec bash {0}"
 on:
-  push:
-    paths:
-      - go.mod
-      - go.sum
+  # Trigger the workflow on pull request events
+  pull_request:
+    types: [opened, reopened, synchronized]
+#    paths:
+#      - go.mod
+#      - go.sum
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -31,14 +33,22 @@ jobs:
       - uses: ./.github/actions/gcloud-login
         with:
           key: ${{ secrets.DA_IMAGES }}
+      - name: Comment on the Pull Request
+        uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # Use the comment action
+        with:
+            message: |
+              The NOTICES file has been updated on this PR due to a change in 
+              your library dependencies.
+              
+              The workflow run ID is **${{ github.run_id }}**.
+            github-token: ${{ secrets.AUTO_REBASE_PAT }}
       - name: Build and Test Go Project
         run: |
           go build -o target/ ./cmd/...
           go test -v ./...
         shell: bash -euo pipefail -c "source nix.source && exec bash {0}"
       - uses: ./.github/actions/blackduck-scan
       - name: Rename notices file
-        if: github.ref != 'refs/heads/main'
         run: |
           files=( *Black_Duck_Notices_Report.txt )
           if [ "${#files[@]}" -eq 1 ]; then
@@ -49,19 +59,17 @@ jobs:
           fi
         shell: bash -euo pipefail -c "source nix.source && exec bash {0}"
       - name: Add comment to PR
-        if: github.ref != 'refs/heads/main'
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
         with:
           script: |
-            github.rest.issues.createComment({
+            github.rest.pulls.createComment({
               issue_number: context.issue.number,
               owner: context.repo.owner,
               repo: context.repo.repo,
               body: "Auto-generated NOTICES file has been commited back to this PR by GitHub Actions"
             })
           github-token: '${{ secrets.AUTO_REBASE_PAT }}'
       - name: Commit and push changes
-        if: github.ref != 'refs/heads/main'
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"