00_pr_auto_approve.yml

name: "00 PR Auto approve"

on: pull_request_target

permissions:
  contents: read

jobs:
  auto-approve:
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
    if: contains(fromJson('["app/dependabot", "app/github-actions", "pdxjohnny"]'), github.actor)
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
        with:
          egress-policy: audit

      - uses: hmarr/auto-approve-action@8f929096a962e83ccdfa8afcf855f39f12d4dac7 # v4
        with:
          review-message: "LGTM"

      - if: contains(fromJson('["app/dependabot", "app/github-actions"]'), github.actor)
        env:
          GH_TOKEN: ${{ github.token }}
          PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}
        run: |
          set -x
          gh pr merge --rebase "${PULL_REQUEST_NUMBER}"