Files
deepseek-harness/.github/workflows/request-review.yml
T

32 lines
928 B
YAML

name: request-review
on:
pull_request_target:
types: [opened, synchronize, reopened, ready_for_review, converted_to_draft]
permissions:
contents: read
pull-requests: write
concurrency:
group: request-review-${{ github.event.pull_request.number }}
cancel-in-progress: true
jobs:
request-review:
name: request-review
runs-on: ubuntu-latest
timeout-minutes: 5
steps:
# SECURITY: the write-capable job executes policy from the trusted default
# branch and reads pull-request filenames only as API data.
- name: Check out trusted review policy
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
ref: ${{ github.event.repository.default_branch }}
persist-credentials: false
- name: Request reviewers
env:
GITHUB_TOKEN: ${{ github.token }}
run: node .github/review-ownership/request-review.mjs