mirror of
https://github.com/Sea-Haven-Industries/.github.git
synced 2026-09-30 18:43:11 +00:00
0889d0f4e4
The action requires OIDC token access even when using an API key directly. Also updates the rollout script template for future repos.
84 lines
2.1 KiB
Bash
Executable file
84 lines
2.1 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
ORG="Sea-Haven-Industries"
|
|
BRANCH="add-claude-review"
|
|
WORKFLOW_PATH=".github/workflows/claude-review.yaml"
|
|
COMMIT_MSG="Add Claude Code review workflow"
|
|
|
|
WORKFLOW_CONTENT='name: Claude Code Review
|
|
|
|
on:
|
|
pull_request:
|
|
types: [opened, synchronize]
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
id-token: write
|
|
|
|
jobs:
|
|
review:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/claude-code-review.yaml@main
|
|
secrets:
|
|
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
|
'
|
|
|
|
SKIP_REPOS=(".github" "shoc-frontend-new" "shoc-backend")
|
|
|
|
should_skip() {
|
|
local repo="$1"
|
|
for skip in "${SKIP_REPOS[@]}"; do
|
|
if [[ "$repo" == "$skip" ]]; then
|
|
return 0
|
|
fi
|
|
done
|
|
return 1
|
|
}
|
|
|
|
echo "Fetching non-archived repos from $ORG..."
|
|
repos=$(gh repo list "$ORG" --no-archived --json name --jq '.[].name' --limit 100)
|
|
|
|
for repo in $repos; do
|
|
if should_skip "$repo"; then
|
|
echo "SKIP $repo (in skip list)"
|
|
continue
|
|
fi
|
|
|
|
echo ""
|
|
echo "--- $repo ---"
|
|
|
|
if gh api "repos/$ORG/$repo/contents/$WORKFLOW_PATH" --jq '.sha' > /dev/null 2>&1; then
|
|
echo "SKIP $repo (workflow already exists)"
|
|
continue
|
|
fi
|
|
|
|
default_branch=$(gh api "repos/$ORG/$repo" --jq '.default_branch')
|
|
|
|
encoded=$(echo -n "$WORKFLOW_CONTENT" | base64)
|
|
|
|
gh api "repos/$ORG/$repo/git/refs" \
|
|
-f "ref=refs/heads/$BRANCH" \
|
|
-f "sha=$(gh api "repos/$ORG/$repo/git/ref/heads/$default_branch" --jq '.object.sha')" \
|
|
2>/dev/null || true
|
|
|
|
gh api "repos/$ORG/$repo/contents/$WORKFLOW_PATH" \
|
|
-X PUT \
|
|
-f "message=$COMMIT_MSG" \
|
|
-f "content=$encoded" \
|
|
-f "branch=$BRANCH" \
|
|
> /dev/null
|
|
|
|
pr_url=$(gh pr create \
|
|
--repo "$ORG/$repo" \
|
|
--base "$default_branch" \
|
|
--head "$BRANCH" \
|
|
--title "$COMMIT_MSG" \
|
|
--body "Adds a thin workflow that delegates PR reviews to the central reusable workflow in \`Sea-Haven-Industries/.github\`. Requires the \`ANTHROPIC_API_KEY\` org secret to be set." \
|
|
2>/dev/null || echo "PR already exists")
|
|
|
|
echo "DONE $repo → $pr_url"
|
|
done
|
|
|
|
echo ""
|
|
echo "Rollout complete. Review and merge the PRs, then delete the feature branches."
|