close-bad-repo-sync-prs.yml

name: Close bad repo-sync PRs

# **What it does**:
#   Closes and PR from `repo-sync` to `main` that wasn't created by a Hubber.
# **Why we have it**:
#   Unfortunately, a lot of PRs in github/docs are created by people who
#   shouldn't be creating such PRs. We bot our bots to own it.
# **Who does it impact**: Open-source.

on:
  # Necessary in lieu of `pull_request` so that PRs opened from forks can be closed if they try to push to a repo sync branch.
  pull_request_target:

permissions:
  contents: write
  pull-requests: write

jobs:
  close-invalid-repo-sync-pr:
    if: ${{ github.repository == 'github/docs' && github.event.pull_request.base.ref == 'main' && github.event.pull_request.head.ref == 'repo-sync' }}
    name: Close if invalid repo-sync PR author
    runs-on: ubuntu-latest
    steps:
      - name: Close pull request if unwanted
        uses: actions/github-script@e69ef5462fd455e02edcaf4dd7708eda96b9eda0
        with:
          github-token: ${{ secrets.DOCS_BOT_PAT_WRITEORG_PROJECT }}
          script: |
            const { owner, repo } = context.repo
            const prCreator = context.actor
            const prNumber = context.issue.number

            try {
              await github.rest.teams.getMembershipForUserInOrg({
                org: 'github',
                team_slug: 'employees',
                username: prCreator
              })

              // If the PR creator is a GitHub employee, stop now
              console.log("PR creator is a GitHub employee")
              return
            } catch (err) {
              // An error will be thrown if the user is not a GitHub employee.
              // That said, we still want to proceed anyway!
            }

            // Close the PR and add the invalid label
            await github.rest.issues.update({
              owner,
              repo,
              issue_number: prNumber,
              labels: ['invalid'],
              state: 'closed'
            })

            // Comment on the PR
            await github.rest.issues.createComment({
              owner,
              repo,
              issue_number: prNumber,
              body: "Please leave this `repo-sync` branch to the robots!\n\nI'm going to close this pull request now, but feel free to open a new issue in the repository!"
            })