mirror of
https://github.com/neovim/neovim.git
synced 2026-09-03 21:00:34 +00:00
dad084c394
Problem: Too many "jobs" listed in the CI report. Solution: - Do the "ai-assisted" step in the "label" job. No need for them to be separate. - Also drop the "already labeled" check; `gh pr edit --add-label` is idempotent. - Note: AI-assisted PRs are now labeled only on the "opened" event, which is fine.
115 lines
4.7 KiB
YAML
115 lines
4.7 KiB
YAML
name: "label-pr"
|
|
on:
|
|
pull_request_target:
|
|
types: [opened, synchronize, reopened, ready_for_review]
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
label:
|
|
if: github.event.action == 'opened'
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
steps:
|
|
- uses: actions/checkout@v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: "changed-files"
|
|
uses: actions/labeler@v7.0.0
|
|
with:
|
|
configuration-path: .github/scripts/labeler_configuration.yml
|
|
|
|
# Scope GITHUB_TOKEN to this step only, avoid exposing to 3P `actions/labeler`.
|
|
- name: "guess type/scope from title"
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
GH_REPO: ${{ github.repository }}
|
|
PR_NUMBER: ${{ github.event.pull_request.number }}
|
|
PR_TITLE: ${{ github.event.pull_request.title }}
|
|
run: |
|
|
gh pr edit "$PR_NUMBER" --add-label "$(echo "$PR_TITLE" | sed -E 's|([[:alpha:]]+)(\(.*\))?!?:.*|\1|')" || true
|
|
gh pr edit "$PR_NUMBER" --add-label "$(echo "$PR_TITLE" | sed -E 's|[[:alpha:]]+\((.+)\)!?:.*|\1|')" || true
|
|
gh pr edit "$PR_NUMBER" --add-label "$(echo "$PR_TITLE" | sed -E 's|[[:alpha:]]+(\(.*\))?!:.*|breaking-change|')" || true
|
|
|
|
- name: "AI-assisted"
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
GH_REPO: ${{ github.repository }}
|
|
PR_NUMBER: ${{ github.event.pull_request.number }}
|
|
run: |
|
|
set -euo pipefail
|
|
# AGENTS.md: AI-assisted commits are disclosed with an "AI-assisted" trailer.
|
|
commit_messages=$(gh api "repos/$GH_REPO/pulls/$PR_NUMBER/commits" --paginate --jq '.[].commit.message')
|
|
if grep -Eiq '\bAI-assisted\b' <<< "$commit_messages"; then
|
|
gh pr edit "$PR_NUMBER" --add-label 'AI assisted 🤖'
|
|
fi
|
|
|
|
- name: "target:release"
|
|
if: startsWith(github.base_ref, 'release')
|
|
uses: actions/github-script@v9
|
|
with:
|
|
script: |
|
|
github.rest.issues.addLabels({
|
|
issue_number: context.issue.number,
|
|
owner: context.repo.owner,
|
|
repo: context.repo.repo,
|
|
labels: ['target:release']
|
|
})
|
|
|
|
no-ai-advertisements:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
# Least privilege.
|
|
pull-requests: read
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
GH_REPO: ${{ github.repository }}
|
|
PR_NUMBER: ${{ github.event.pull_request.number }}
|
|
steps:
|
|
# AGENTS.md: disclose with a bare "AI-assisted" trailer, and do not name the model or service.
|
|
- name: "Reject AI advertisements in commit messages"
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
# Prefix each message line with its commit, so a failure names the offender.
|
|
commits=$(gh api "repos/$GH_REPO/pulls/$PR_NUMBER/commits" --paginate \
|
|
--jq '.[] | .sha[0:12] as $sha | .commit.message | split("\n")[] | "\($sha) \(.)"')
|
|
|
|
tools='aider|anthropic|chatgpt|claude|cline|codex|copilot|cursor|devin|gemini|openai|opencode|windsurf|\bamp\b|\bai\b|\bllm\b|\bgpt\b'
|
|
by='(co-authored|signed-off|assisted|helped|generated|written|created|reviewed|suggested|reported|tested|debugged)[ -]?by'
|
|
hosts='claude\.ai|anthropic\.com|openai\.com|chatgpt\.com|copilot\.microsoft\.com|cursor\.(com|sh)|ampcode\.com|codeium\.com|windsurf\.com|(gemini|aistudio)\.google\.com'
|
|
|
|
found=$({
|
|
# Attribution trailers and phrasing.
|
|
grep -Ei "^\S+ +$by:.*($tools)" <<< "$commits" || true
|
|
grep -Ei "(generated|written|assisted|supported|powered|created|helped)[ -](by|with)[: ]+.*($tools)" <<< "$commits" || true
|
|
# Session links and trailers.
|
|
grep -Ei "^\S+ +($tools)[a-z0-9-]*-(session|thread|chat|conversation|link|url|id):" <<< "$commits" || true
|
|
grep -Ei "https?://[^ ]*($hosts)" <<< "$commits" || true
|
|
grep -Ei '@(anthropic|openai)\.com' <<< "$commits" || true
|
|
# Tool names anywhere, not just as attribution. Disabled to avoid false positives, for now...
|
|
# grep -Ei 'aider|anthropic|chatgpt|claude|codex|copilot|devin|gemini|openai|opencode|windsurf' <<< "$commits" || true
|
|
# The "AI-assisted" trailer must not name the tool.
|
|
grep -Ei '^\S+ +AI-assisted:.*\S' <<< "$commits" || true
|
|
grep -F '🤖' <<< "$commits" || true
|
|
} | sort -u)
|
|
|
|
if [[ -n "$found" ]]; then
|
|
echo 'Remove AI advertisements from commit messages ("Co-authored-by: Claude", etc.).'
|
|
echo 'Only a generic "AI-assisted" token is allowed, see AGENTS.md.'
|
|
echo
|
|
echo "$found"
|
|
exit 1
|
|
fi
|
|
|
|
request-reviewer:
|
|
if: github.event.action == 'opened'
|
|
needs: label
|
|
permissions:
|
|
pull-requests: write
|
|
uses: ./.github/workflows/reviewers_add.yml
|