Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 41 additions & 1 deletion .github/workflows/ai-gatekeeper.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,7 @@ jobs:
printf 'summary=%s\n' "No PR context; skipping gatekeeper checks." >> "$GITHUB_OUTPUT"
echo "details=" >> "$GITHUB_OUTPUT"
echo "is_bot=false" >> "$GITHUB_OUTPUT"
echo "docs_only=false" >> "$GITHUB_OUTPUT"
exit 0
fi

Expand All @@ -59,10 +60,44 @@ jobs:
printf 'summary=%s\n' "Not a Devin-authored PR. Skipping human-review enforcement." >> "$GITHUB_OUTPUT"
echo "details=" >> "$GITHUB_OUTPUT"
echo "is_bot=false" >> "$GITHUB_OUTPUT"
echo "docs_only=false" >> "$GITHUB_OUTPUT"
exit 0
fi
echo "is_bot=true" >> "$GITHUB_OUTPUT"

# 2b. Docs-only changes skip additional approvals
PR_FILES=$(gh api "repos/$REPO/pulls/$PR/files" --paginate)
DOCS_ONLY=$(
echo "$PR_FILES" | jq -r '
if length == 0 then
"false"
else
all(.[]; (
(.filename | test("(?i)^(docs|doc)/"))
or (.filename | test("(?i)\\.(md|mdx|markdown|rst|adoc)$"))
or (.filename | test("(?i)(^|/)(README|CHANGELOG)(\\..*)?$"))
)) | tostring
end
'
)

if [ "$DOCS_ONLY" = "true" ]; then
FILES_LIST=$(echo "$PR_FILES" | jq -r '[.[].filename] | map("- " + .) | join("\n")')
echo "docs_only=true" >> "$GITHUB_OUTPUT"
echo "conclusion=success" >> "$GITHUB_OUTPUT"
printf 'summary=%s\n' "Docs-only changes detected. Additional approvals are not required." >> "$GITHUB_OUTPUT"
{
echo "details<<EOF"
echo "Docs-only files:"
echo "$FILES_LIST"
echo "EOF"
} >> "$GITHUB_OUTPUT"
echo "approvals_list=" >> "$GITHUB_OUTPUT"
echo "approvals_missing=0" >> "$GITHUB_OUTPUT"
exit 0
fi
echo "docs_only=false" >> "$GITHUB_OUTPUT"

# 3. Reduce to latest review per human
LATEST_REVIEWS_JSON=$(
echo "$PR_DATA" | jq -c '
Expand Down Expand Up @@ -153,11 +188,16 @@ jobs:
APPROVERS: ${{ steps.evaluate.outputs.approvals_list }}
MISSING: ${{ steps.evaluate.outputs.approvals_missing }}
CONCLUSION: ${{ steps.evaluate.outputs.conclusion }}
DOCS_ONLY: ${{ steps.evaluate.outputs.docs_only }}
run: |
set -euo pipefail
MARKER="<!-- bot-proxy-gatekeeper-comment -->"
APPROVER_LINE="Current approvals: ${APPROVERS:-none}"
if [ "$CONCLUSION" = "success" ]; then
if [ "$DOCS_ONLY" = "true" ]; then
MSG=$(printf "%s\n%s" \
"$MARKER" \
"📝 **Docs-only changes**: additional approvals are not required.")
elif [ "$CONCLUSION" = "success" ]; then
MSG=$(printf "%s\n%s\n\n**%s**" \
"$MARKER" \
"✅ **Review Requirements Satisfied**: 2 different human approvals are present." \
Expand Down