pull-request-label.yml

name: Handle label added on community pull request
on:
  workflow_call:
    secrets:
      LE_BOT_APP_ID:
        description: 'GitHub App ID for authentication'
        required: true
      LE_BOT_PRIVATE_KEY:
        description: 'GitHub App Private Key for authentication'
        required: true
jobs:
  check-if-contributor:
    name: Check if author is contributor
    uses: learningequality/.github/.github/workflows/is-contributor.yml@main
    secrets:
      LE_BOT_APP_ID: ${{ secrets.LE_BOT_APP_ID }}
      LE_BOT_PRIVATE_KEY: ${{ secrets.LE_BOT_PRIVATE_KEY }}
    with:
      username: ${{ github.event.pull_request.user.login }}
      author_association: ${{ github.event.pull_request.author_association }}
  handle-label:
    name: Handle label
    needs: [check-if-contributor]
    if: ${{ needs.check-if-contributor.outputs.is_contributor == 'true' }}
    runs-on: ubuntu-latest
    steps:
      - name: Generate App Token
        id: generate-token
        uses: actions/create-github-app-token@v3
        with:
          app-id: ${{ secrets.LE_BOT_APP_ID }}
          private-key: ${{ secrets.LE_BOT_PRIVATE_KEY }}
      - name: Checkout .github repository
        uses: actions/checkout@v6
        with:
          repository: learningequality/.github
          ref: main
          token: ${{ steps.generate-token.outputs.token }}
      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '20'
      - name: Install dependencies
        run: yarn install --frozen-lockfile
      - name: Run script
        id: script
        uses: actions/github-script@v8
        with:
          github-token: ${{ steps.generate-token.outputs.token }}
          script: |
            const script = require('./scripts/pull-request-label.js');
            return await script({ github, context, core });