flathub/.github/workflows/merge.yml

name: Automatic application merge

on: 
  issue_comment:
    types:
      - created
  workflow_dispatch:

jobs:
  merge:
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
    if: ${{ github.event.issue.pull_request && contains(github.event.comment.body, '/merge') }}
    container:
      image: ghcr.io/flathub/actions/merge:latest@sha256:ebeb5c952d8277b56ac96c72c66205c32d241119d086e9e7fa8848e80df39107
    steps:
      - name: Check if actor is reviewer
        id: check_reviewer
        run: |
          if [ "$(gh api --silent repos/"$GH_REPO"/collaborators/"$ACTOR"/permission | jq -r '.user.permissions.push')" == "true" ]; then
            echo "is-reviewer=true" >> "$GITHUB_OUTPUT"
          else
            echo "is-reviewer=false" >> "$GITHUB_OUTPUT"
          fi
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GH_REPO: ${{ github.repository }}
          ACTOR: ${{ github.actor }}

      - name: Add ready label
        run: |
          if ! gh pr view --json labels -q '.labels[].name' "$PR_NUMBER"|grep -qE "^ready$"; then
            gh pr edit "$PR_NUMBER" --add-label "ready"
          fi
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GH_REPO: ${{ github.repository }}
          PR_NUMBER: ${{ github.event.number }}

      - run: /app/entrypoint.py
        if: ${{ steps.check_reviewer.outputs.is-reviewer == 'true' }}
        env:
          GITHUB_TOKEN: ${{ secrets.FLATHUBBOT_TOKEN }}