Merge branch 'main' into add-content

Author: mikeharder

.github/workflows/pull-request-completed.yaml

@@ -10,8 +10,6 @@ jobs:
     name: Pull Request - Completed
 
     permissions:
-      # Required to read logs of other workflow
-      actions: read
       contents: read
       pull-requests: write
 
@@ -26,6 +24,7 @@ jobs:
         with:
           # Must use "pattern" instead of "name" to avoid errors if artifact doesn't exist
           pattern: foo
+          # Must specify token and repository, to pull from the base fork in fork PRs
           github-token: ${{ github.token }}
           repository: ${{ github.repository }}
           run-id: ${{ github.event.workflow_run.id }}

.github/workflows/scripts/pull-request-completed.js

@@ -27,6 +27,8 @@ module.exports = async ({ github, context, core }) => {
     const sha = payload.workflow_run.head_sha;
 
     console.log(`Finding pull requests for '/${owner}/${repo}/${sha}'`);
+
+    // Must call this API, since 'payload.workflow_run.pull_requests' is empty for fork PRs
     const { data: pullRequests } =
       await github.rest.repos.listPullRequestsAssociatedWithCommit({
         owner: owner,

.github/workflows/scripts/pull-request.js

@@ -10,8 +10,20 @@ const { env } = require("process");
  * @param {string?} label
  */
 module.exports = async ({ github, context, core }, folder, label) => {
+  console.log(JSON.stringify(context, null, 2));
+
   const file = join(folder, "content.txt");
 
+  const payload = /** @type {import("@octokit/webhooks-types").PullRequestEvent} */ (context.payload);
+
+  const permissionLevel = await github.rest.repos.getCollaboratorPermissionLevel({
+    owner: payload.repository.owner.login,
+    repo: payload.repository.name,
+    username: payload.pull_request.user.login,
+  });
+
+  console.log(JSON.stringify(permissionLevel, null, 2));
+
   try {
     const content = await readFile(file, { encoding: "utf8" });
     console.log(`File '${file}' exists.  Content:\n${content}`);