42215b1979
Add auto-merge workflow for org member PRs, external PR gate with label-based approval, and actionable fix instructions for QA failures. - auto-merge.yml: enable squash auto-merge for org member PRs - pr-gate.yml: org-gate check blocks external PRs without label - cmd_qa.go: add FixHint field, fixHintFor(), extractFailingTest() - Ruleset: thread resolution, stale review dismissal, 1min merge wait Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
name: PR Gate
|
|
|
|
on:
|
|
pull_request_target:
|
|
types: [opened, synchronize, reopened, labeled]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
org-gate:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Check org membership or approval label
|
|
uses: actions/github-script@v7
|
|
with:
|
|
script: |
|
|
const { owner, repo } = context.repo;
|
|
const author = context.payload.pull_request.user.login;
|
|
|
|
// Check if author is an org member
|
|
try {
|
|
await github.rest.orgs.checkMembershipForUser({
|
|
org: owner,
|
|
username: author,
|
|
});
|
|
core.info(`${author} is an org member — gate passed`);
|
|
return;
|
|
} catch {
|
|
core.info(`${author} is not an org member — checking for label`);
|
|
}
|
|
|
|
// Check for external-approved label
|
|
const labels = context.payload.pull_request.labels.map(l => l.name);
|
|
if (labels.includes('external-approved')) {
|
|
core.info('external-approved label present — gate passed');
|
|
return;
|
|
}
|
|
|
|
core.setFailed(
|
|
`External PR from ${author} requires an org member to add the "external-approved" label before merge.`
|
|
);
|