request-review.yml 928 B

12345678910111213141516171819202122232425262728293031
  1. name: request-review
  2. on:
  3. pull_request_target:
  4. types: [opened, synchronize, reopened, ready_for_review, converted_to_draft]
  5. permissions:
  6. contents: read
  7. pull-requests: write
  8. concurrency:
  9. group: request-review-${{ github.event.pull_request.number }}
  10. cancel-in-progress: true
  11. jobs:
  12. request-review:
  13. name: request-review
  14. runs-on: ubuntu-latest
  15. timeout-minutes: 5
  16. steps:
  17. # SECURITY: the write-capable job executes policy from the trusted default
  18. # branch and reads pull-request filenames only as API data.
  19. - name: Check out trusted review policy
  20. uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
  21. with:
  22. ref: ${{ github.event.repository.default_branch }}
  23. persist-credentials: false
  24. - name: Request reviewers
  25. env:
  26. GITHUB_TOKEN: ${{ github.token }}
  27. run: node .github/review-ownership/request-review.mjs