contractors_review_requirements.yml

name: Connector Ops CI - Check contractors review requirements

on:
  pull_request:
    types:
      - opened
      - ready_for_review
      - reopened
      - synchronize
jobs:
  check-review-requirements:
    name: "Check if a review is required from Connector teams"
    runs-on: ubuntu-latest

    if: ${{ github.event.pull_request.head.repo.fork == false }}
    # This workflow cannot run on forks, as the fork's github token does not have `read:org`
    # permissions, which are required to check the user's team membership. We assume that a
    # review on a fork's PR is always required from one or more connector teams and/or support.

    steps:
      - name: Check contributor team membership
        uses: tspascoal/get-user-teams-membership@v3
        id: actorTeams
        with:
          username: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.OCTAVIA_4_ROOT_ACCESS }}
      - if: ${{ (contains(steps.actorTeams.outputs.teams, 'community-contractor')) }}
        name: Check if the review requirements are met
        uses: Automattic/action-required-review@v3
        with:
          status: Required review
          token: ${{ secrets.OCTAVIA_4_ROOT_ACCESS }}
          request-reviews: true
          fail: true
          requirements: |
            - paths:
                - "airbyte-integrations/connectors/source-**"
                - "airbyte-integrations/connectors/destination-**"
              teams:
                - dev-marketplace-contributions