devops_admin
/
odex25_standard
mirror of https://github.com/hydracp9/odex25_standard
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'dev_odex25_helpdesk' into serv

This commit is contained in:
mohammed-alkhazrji 2025-11-30 01:11:56 -08:00 committed by GitHub
parent cc4e1a80b2 c943c218b2
commit 9730bc260b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 56 additions and 49 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

58
.github/workflows/block_reserved_branches.yml vendored
View File

@ -23,38 +23,38 @@ jobs:
####################################################### #######################################################
# 🟦 1) Allowed Users List # 🟦 1) Allowed Users List
####################################################### #######################################################
ALLOWED_USERS=( # ALLOWED_USERS=(
"expsa" # "expsa"
"moutazmuhammad" # "moutazmuhammad"
"ronozoro" # "ronozoro"
"Abubaker-Altaib" # "Abubaker-Altaib"
"altexp" # "altexp"
"the5abir" # "the5abir"
"ahmadaking" # "ahmadaking"
"kchyounes19" # "kchyounes19"
"abdurrahman-saber" # "abdurrahman-saber"
"maltayyar2" # "maltayyar2"
"esam-sermah" # "esam-sermah"
"mohammed-alkhazrji" # "mohammed-alkhazrji"
) # )
IS_ALLOWED="false" # IS_ALLOWED="false"
for user in "${ALLOWED_USERS[@]}"; do # for user in "${ALLOWED_USERS[@]}"; do
if [[ "$CREATOR" == "$user" ]]; then # if [[ "$CREATOR" == "$user" ]]; then
IS_ALLOWED="true" # IS_ALLOWED="true"
break # break
fi # fi
done # done
if [[ "$IS_ALLOWED" == "false" ]]; then # if [[ "$IS_ALLOWED" == "false" ]]; then
echo "❌ User '$CREATOR' is NOT allowed to create branches. Deleting..." # echo "❌ User '$CREATOR' is NOT allowed to create branches. Deleting..."
curl -s -X DELETE \ # curl -s -X DELETE \
-H "Authorization: token $GH_TOKEN" \ # -H "Authorization: token $GH_TOKEN" \
https://api.github.com/repos/$REPO/git/refs/heads/$BRANCH_NAME # https://api.github.com/repos/$REPO/git/refs/heads/$BRANCH_NAME
exit 1 # exit 1
fi # fi
echo "✔ User '$CREATOR' is allowed." # echo "✔ User '$CREATOR' is allowed."
####################################################### #######################################################
# 🟦 2) Reserved Branch Names (Your Existing List) # 🟦 2) Reserved Branch Names (Your Existing List)

47
.github/workflows/restrict-pr-authors.yaml vendored
View File

@ -31,6 +31,7 @@ on:
- dev_odex25_helpdesk - dev_odex25_helpdesk
- dev_odex25_donation - dev_odex25_donation
- dev_odex25_ensan - dev_odex25_ensan
jobs: jobs:
check_pr_author: check_pr_author:
runs-on: linting_odex25-standard-modules_runner runs-on: linting_odex25-standard-modules_runner
@ -74,29 +75,35 @@ jobs:
}); });
return; return;
} }
core.info("All PR authors are allowed.");
// Check commit authors # // Check commit authors
const commitList = await github.rest.pulls.listCommits({ # const commitList = await github.rest.pulls.listCommits({
owner, # owner,
repo, # repo,
pull_number: pr.number # pull_number: pr.number
}); # });
for (const commit of commitList.data) { # core.info("PR author is allowed.");
const commitAuthor = commit.author ? commit.author.login : null;
if (commitAuthor && !allowed.includes(commitAuthor)) { # // Uncomment below if you want to block unauthorized commit authors also
core.error(`Unauthorized commit author: ${commitAuthor}. Closing PR...`); # /*
# for (const commit of commitList.data) {
# const commitAuthor = commit.author ? commit.author.login : null;
await github.rest.pulls.update({ # if (commitAuthor && !allowed.includes(commitAuthor)) {
owner, # core.error(`Unauthorized commit author: ${commitAuthor}. Closing PR...`);
repo,
pull_number: pr.number,
state: "closed"
});
return; # await github.rest.pulls.update({
} # owner,
} # repo,
# pull_number: pr.number,
# state: "closed"
# });
core.info("All PR authors and committers are allowed."); # return;
# }
# }
# core.info("All PR authors and committers are allowed.");
# */