approve-bot-pr.yml

name: Approve Bot PRs and Enable Auto-Merge

on:
  workflow_run:
    workflows: ["Test Pull Request"]
    types:
    - completed

jobs:
  download:
    name: Download PR Artifact
    if: ${{ github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success' }}
    runs-on: ubuntu-latest
    outputs:
      pr-author: ${{ steps.pr-data.outputs.author }}
      pr-number: ${{ steps.pr-data.outputs.number }}
    steps:
    - name: 'Download artifact'
      uses: paketo-buildpacks/github-config/actions/pull-request/download-artifact@main
      with:
        name: "event-payload"
        repo: ${{ github.repository }}
        run_id: ${{ github.event.workflow_run.id }}
        workspace: "/github/workspace"
        token: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
    - id: pr-data
      run: |
        echo "::set-output name=author::$(cat event.json | jq -r '.pull_request.user.login')"
        echo "::set-output name=number::$(cat event.json | jq -r '.pull_request.number')"

  approve:
    name: Approve Bot PRs
    needs: download
    if: ${{ needs.download.outputs.pr-author == 'paketo-bot' || needs.download.outputs.pr-author == 'dependabot[bot]' }}
    runs-on: ubuntu-latest
    steps:
    - name: Check Commit Verification
      id: unverified-commits
      uses: paketo-buildpacks/github-config/actions/pull-request/check-unverified-commits@main
      with:
        token: ${{ secrets.PAKETO_BOT_REVIEWER_GITHUB_TOKEN }}
        repo: ${{ github.repository }}
        number: ${{ needs.download.outputs.pr-number }}

    - name: Check for Human Commits
      id: human-commits
      uses: paketo-buildpacks/github-config/actions/pull-request/check-human-commits@main
      with:
        token: ${{ secrets.PAKETO_BOT_REVIEWER_GITHUB_TOKEN }}
        repo: ${{ github.repository }}
        number: ${{ needs.download.outputs.pr-number }}

    - name: Checkout
      if: steps.human-commits.outputs.human_commits == 'false' && steps.unverified-commits.outputs.unverified_commits == 'false'
      uses: actions/checkout@v3

    - name: Approve
      if: steps.human-commits.outputs.human_commits == 'false' && steps.unverified-commits.outputs.unverified_commits == 'false'
      uses: paketo-buildpacks/github-config/actions/pull-request/approve@main
      with:
        token: ${{ secrets.PAKETO_BOT_REVIEWER_GITHUB_TOKEN }}
        number: ${{ needs.download.outputs.pr-number }}

    - name: Enable Auto-Merge
      if: steps.human-commits.outputs.human_commits == 'false' && steps.unverified-commits.outputs.unverified_commits == 'false'
      run: |
        gh pr merge ${{ needs.download.outputs.pr-number }} --auto --rebase
      env:
        GITHUB_TOKEN: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}