From 112f48f5cb35b21e01c4a8511e0a73aebbe47ec6 Mon Sep 17 00:00:00 2001 From: j2fw <233818084+j2fw@users.noreply.github.com> Date: Wed, 5 Nov 2025 08:15:03 -0800 Subject: [PATCH] Remove gh-actions approval workflows in favor of new repo setting (#4525) * Remove gh-actions approval workflows in favor of new repo setting --- .github/workflows/pr-approval-check.yml | 45 ------------------------- .github/workflows/receive-pr.yml | 24 ------------- 2 files changed, 69 deletions(-) delete mode 100644 .github/workflows/pr-approval-check.yml delete mode 100644 .github/workflows/receive-pr.yml diff --git a/.github/workflows/pr-approval-check.yml b/.github/workflows/pr-approval-check.yml deleted file mode 100644 index 8331127ba..000000000 --- a/.github/workflows/pr-approval-check.yml +++ /dev/null @@ -1,45 +0,0 @@ -name: PR Approval Check - -on: - workflow_run: - workflows: ["Receive PR"] - types: ["completed"] - -permissions: - actions: read - -jobs: - approval: - runs-on: ubuntu-slim - steps: - - name: Download artifact from triggering run - uses: actions/download-artifact@v6 - with: - run-id: ${{ github.event.workflow_run.id }} - name: prnum - github-token: ${{ github.token }} - - - name: Read inputs - id: get-prnum - run: | - set -euo pipefail - echo "prnum=$(cat prnum.txt)" >> "$GITHUB_OUTPUT" - - - name: Mint installation token - id: app-token - uses: actions/create-github-app-token@v2.1.4 - with: - app-id: ${{ secrets.PR_APPROVAL_CHECK_APP_ID }} - private-key: ${{ secrets.PR_APPROVAL_CHECK }} - - - name: Require Product Eng approval - uses: trufflesecurity/pr-approval-check@main - with: - org: trufflesecurity - approver_team: product-eng - owner: ${{ github.event.workflow_run.repository.owner.login }} - repo: ${{ github.event.workflow_run.repository.name }} - head: ${{ github.event.workflow_run.head_sha }} - number: ${{ steps.get-prnum.outputs.prnum }} - github_token: ${{ steps.app-token.outputs.token }} - diff --git a/.github/workflows/receive-pr.yml b/.github/workflows/receive-pr.yml deleted file mode 100644 index d606e8406..000000000 --- a/.github/workflows/receive-pr.yml +++ /dev/null @@ -1,24 +0,0 @@ -name: "Receive PR" - -on: - pull_request_target: - types: [opened, synchronize, reopened, ready_for_review] - pull_request_review: - types: [submitted, edited, dismissed] - -jobs: - prnum: - runs-on: ubuntu-slim - steps: - - name: Determine PR Number - id: build - run: | - echo "PR: ${{ github.event.pull_request.number }}" - echo "${{ github.event.pull_request.number }}" > prnum.txt - - name: Submit - uses: actions/upload-artifact@v5 - with: - name: prnum - path: prnum.txt - retention-days: 1 -