fix: support constructor and __proto__ parameters in Parse URI (#2578) #32
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CLA Label Sync | |
| on: | |
| issue_comment: | |
| types: [created, edited] | |
| pull_request_target: | |
| types: [opened, synchronize, reopened] | |
| permissions: | |
| pull-requests: write | |
| issues: write | |
| contents: read | |
| jobs: | |
| sync-label: | |
| # Only run for PRs (issue_comment fires for issues too) | |
| if: >- | |
| github.event_name == 'pull_request_target' || | |
| (github.event.issue.pull_request != null) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Sync "awaiting cla" label | |
| uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #v9.0.0 | |
| env: | |
| AWAITING_LABEL: 'awaiting cla' | |
| # Bot login that posts the CLA comment. Common values: | |
| # 'github-actions[bot]', 'CLAassistant', 'cla-assistant[bot]' | |
| CLA_BOT_LOGINS: 'CLAassistant' | |
| # Regex (case-insensitive) that matches an UNSIGNED CLA comment | |
| NOT_SIGNED_REGEX: 'cla-assistant.io/pull/badge/not_signed' | |
| # Regex (case-insensitive) that matches a SIGNED CLA comment | |
| SIGNED_REGEX: 'cla-assistant.io/pull/badge/signed' | |
| with: | |
| script: | | |
| const awaitingLabel = process.env.AWAITING_LABEL; | |
| const botLogins = process.env.CLA_BOT_LOGINS.split(',').map(s => s.trim().toLowerCase()); | |
| const notSigned = new RegExp(process.env.NOT_SIGNED_REGEX, 'i'); | |
| const signed = new RegExp(process.env.SIGNED_REGEX, 'i'); | |
| // Resolve PR number for either trigger | |
| const prNumber = context.eventName === 'pull_request_target' | |
| ? context.payload.pull_request.number | |
| : context.payload.issue.number; | |
| const { owner, repo } = context.repo; | |
| // Pull the full comment history to find the latest CLA bot comment | |
| const comments = await github.paginate(github.rest.issues.listComments, { | |
| owner, repo, issue_number: prNumber, per_page: 100, | |
| }); | |
| const claComments = comments.filter(c => | |
| botLogins.includes((c.user?.login || '').toLowerCase()) && | |
| (notSigned.test(c.body) || signed.test(c.body)) | |
| ); | |
| if (claComments.length === 0) { | |
| core.info('No CLA Assistant comment found yet; nothing to do.'); | |
| return; | |
| } | |
| const latest = claComments[claComments.length - 1]; | |
| const isSigned = signed.test(latest.body) && !notSigned.test(latest.body); | |
| core.info(`Latest CLA comment (id ${latest.id}) => signed=${isSigned}`); | |
| // Current labels | |
| const { data: issue } = await github.rest.issues.get({ | |
| owner, repo, issue_number: prNumber, | |
| }); | |
| const hasLabel = issue.labels.some(l => | |
| (typeof l === 'string' ? l : l.name) === awaitingLabel | |
| ); | |
| if (isSigned && hasLabel) { | |
| await github.rest.issues.removeLabel({ | |
| owner, repo, issue_number: prNumber, name: awaitingLabel, | |
| }).catch(e => core.warning(`removeLabel failed: ${e.message}`)); | |
| core.info(`Removed "${awaitingLabel}".`); | |
| } else if (!isSigned && !hasLabel) { | |
| await github.rest.issues.addLabels({ | |
| owner, repo, issue_number: prNumber, labels: [awaitingLabel], | |
| }); | |
| core.info(`Added "${awaitingLabel}".`); | |
| } else { | |
| core.info('Label already in the correct state.'); | |
| } |