security/.github/workflows/automatic-merges.yml at main · pCastq/security · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: automatic-merges

on:
  workflow_run:
    workflows:
      - CI
      - Plugin Install
      - Code Hygiene
    types: completed

jobs:
  automatic-merge-version-bumps:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - name: GitHub App token
        id: github_app_token
        uses: tibdex/github-app-token@v2.1.0
        with:
          app_id: ${{ secrets.APP_ID }}
          private_key: ${{ secrets.APP_PRIVATE_KEY }}
          installation_id: 22958780

      - id: find-triggering-pr
        uses: peternied/find-triggering-pr@v1
        with:
          token: ${{ steps.github_app_token.outputs.token }}

      - uses: peternied/discerning-merger@v3
        if: steps.find-triggering-pr.outputs.pr-number != null
        with:
          token: ${{ steps.github_app_token.outputs.token }}
          pull-request-number: ${{ steps.find-triggering-pr.outputs.pr-number }}
          allowed-authors: |
            dependabot[bot]
            opensearch-trigger-bot[bot]
          allowed-files: |
            build.gradle
            CHANGELOG.md
            .github/workflows/*.yml