mirror of
https://github.com/curl/curl.git
synced 2026-04-18 13:31:40 +03:00
Ref: https://github.com/zizmorcore/zizmor/pull/1131 Ref: https://docs.zizmor.sh/audits/#undocumented-permissions Bug: https://github.com/curl/curl/pull/18539#issuecomment-3288151910 Closes #18541
71 lines
2.9 KiB
YAML
71 lines
2.9 KiB
YAML
# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
#
|
|
# SPDX-License-Identifier: curl
|
|
|
|
name: 'Hacktoberfest'
|
|
|
|
'on':
|
|
# this must not ever run on any other branch than master
|
|
push:
|
|
branches:
|
|
- master
|
|
|
|
concurrency:
|
|
# this should not run in parallel, so just run one at a time
|
|
group: ${{ github.workflow }}
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
# add hacktoberfest-accepted label to PRs opened starting from September 30th
|
|
# till November 1st which are closed via commit reference from master branch.
|
|
merged:
|
|
name: 'Add hacktoberfest-accepted label'
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
issues: write # To edit labels on PRs
|
|
pull-requests: write # To edit labels on PRs
|
|
steps:
|
|
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
|
|
with:
|
|
persist-credentials: false
|
|
fetch-depth: 100
|
|
|
|
- name: 'Check whether repo participates in Hacktoberfest'
|
|
id: check
|
|
env:
|
|
GH_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
|
|
run: |
|
|
gh config set prompt disabled && echo "label=$(
|
|
gh repo view --json repositoryTopics --jq '.repositoryTopics[].name' | grep '^hacktoberfest$')" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: 'Search relevant commit message lines starting with Closes/Merges'
|
|
if: ${{ steps.check.outputs.label == 'hacktoberfest' }}
|
|
env:
|
|
GITHUB_EVENT_BEFORE: '${{ github.event.before }}'
|
|
GITHUB_EVENT_AFTER: '${{ github.event.after }}'
|
|
run: |
|
|
git log --format=email "${GITHUB_EVENT_BEFORE}..${GITHUB_EVENT_AFTER}" | \
|
|
grep -Ei '^Close[sd]? ' | sort | uniq | tee log
|
|
|
|
- name: 'Search for number-based PR references'
|
|
if: ${{ steps.check.outputs.label == 'hacktoberfest' }}
|
|
env:
|
|
GH_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
|
|
run: |
|
|
grep -Eo '#([0-9]+)' log | cut -d# -f2 | sort | uniq | xargs -t -n1 -I{} \
|
|
gh pr view {} --json number,createdAt \
|
|
--jq '{number, opened: .createdAt} | [.number, .opened] | join(":")' | tee /dev/stderr | \
|
|
grep -Eo '^([0-9]+):[0-9]{4}-(09-30T|10-|11-01T)' | cut -d: -f1 | sort | uniq | xargs -t -n1 -I {} \
|
|
gh pr edit {} --add-label 'hacktoberfest-accepted'
|
|
|
|
- name: 'Search for URL-based PR references'
|
|
if: ${{ steps.check.outputs.label == 'hacktoberfest' }}
|
|
env:
|
|
GH_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
|
|
run: |
|
|
grep -Eo 'github.com/(.+)/(.+)/pull/([0-9]+)' log | sort | uniq | xargs -t -n1 -I{} \
|
|
gh pr view 'https://{}' --json number,createdAt \
|
|
--jq '{number, opened: .createdAt} | [.number, .opened] | join(":")' | tee /dev/stderr | \
|
|
grep -Eo '^([0-9]+):[0-9]{4}-(09-30T|10-|11-01T)' | cut -d: -f1 | sort | uniq | xargs -t -n1 -I {} \
|
|
gh pr edit {} --add-label 'hacktoberfest-accepted'
|