build: use inputs and secrets in reusable workflow

Planeshifter · Planeshifter · commit 5e64bdffe643 · 2024-02-23T20:48:11.000-05:00
diff --git a/.github/workflows/check_required_files.yml b/.github/workflows/check_required_files.yml
@@ -23,6 +23,31 @@ name: check_required_files
 on:
   # Allow the workflow to be triggered by other workflows
   workflow_call:
+    # Define the input parameters for the workflow:
+    inputs:
+      pull_request_number:
+        description: 'Pull request number'
+        required: true
+        type: number
+      user:
+        required: true
+        type: string
+    # Define the secrets accessible by the workflow:
+    secrets:
+      STDLIB_BOT_GITHUB_TOKEN:
+        description: 'stdlib-bot GitHub token to create pull request comments'
+        required: true
+
+  # Allow the workflow to be manually triggered:
+  workflow_dispatch:
+    inputs:
+      pull_request_number:
+        description: 'Pull request number'
+        required: true
+        type: number
+      user:
+        required: true
+        type: string
 
 # Global permissions:
 permissions:
@@ -44,42 +69,15 @@ jobs:
     # Define the sequence of job steps...
     steps:
 
-      # Checkout the repository:
-      - name: 'Checkout repository'
-        # Pin action to full length commit SHA
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-        with:
-          # Specify whether to remove untracked files before checking out the repository:
-          clean: true
-
-          # Refers to the development branch:
-          ref: 'develop'
-
-          # Refers to the repository name of the pull request:
-          repository: ${{ github.event.issue.pull_request.head.repo.full_name }}
-
-          # Limit clone depth to the most recent commit:
-          fetch-depth: 1
-
-          # Specify whether to download Git-LFS files:
-          lfs: false
-        timeout-minutes: 10
-
-      # Configure git:
-      - name: 'Configure git'
-        run: |
-          git config --local user.email "noreply@stdlib.io"
-          git config --local user.name "stdlib-bot"
-          git fetch --all
-
       # Get list of added files:
       - name: 'Get list of added files'
         id: added-files
         run: |
           page=1
           files=""
           while true; do
-              new_files=$(curl -s -H "Accept: application/vnd.github.v3+json" -H "Authorization: Bearer ${{ secrets.STDLIB_BOT_GITHUB_TOKEN }}" "https://api.github.com/repos/stdlib-js/stdlib/pulls/${{ github.event.issue.pull_request.number }}/files?page=$page&per_page=100" | jq -r '.[] | select(.status == "added") | .filename')
+              new_files=$(curl -s -H "Accept: application/vnd.github.v3+json" -H "Authorization: Bearer ${{ secrets.STDLIB_BOT_GITHUB_TOKEN
+                 }}" "https://api.github.com/repos/stdlib-js/stdlib/pulls/${{ inputs.pull_request_number }}/files?page=$page&per_page=100" | jq -r '.[] | select(.status == "added") | .filename')
               if [ -z "$new_files" ]; then
                   break
               fi
@@ -169,15 +167,15 @@ jobs:
 
           body=""
           if [[ "${#missing_files[@]}" -eq 0 ]]; then
-            body="Hi @${{ github.event.issue.pull_request.user.login }}, thank you for your contribution!
+            body="Hi @${{ inputs.user }}, thank you for your contribution!
 
             :tada: Your pull request contains all required files for the new package: :tada:
 
             ${checkbox_list}
 
             -- stdlib-bot"
           else
-            body="Hi @${{ github.event.issue.pull_request.user.login }}, thank you for your contribution! Your pull request contains a new package, but is missing some of the required files.
+            body="Hi @${{ inputs.user }}, thank you for your contribution! Your pull request contains a new package, but is missing some of the required files.
 
             Use the following checklist to keep track of the required files and which ones are still missing:
 
@@ -203,7 +201,7 @@ jobs:
         uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
         with:
           # Specify the issue or pull request number:
-          issue-number: ${{ github.issue.pull_request.number }}
+          issue-number: ${{ inputs.pull_request_number }}
 
           # Specify the comment body:
           body: ${{ steps.check-required-files.outputs.comment-body }}
diff --git a/.github/workflows/slash_commands.yml b/.github/workflows/slash_commands.yml
@@ -35,6 +35,11 @@ jobs:
 
     # Run reusable workflow:
     uses: ./.github/workflows/check_required_files.yml
+    with:
+      pull_request_number: ${{ github.event.issue.pull_request.number }}
+      user: ${{ github.event.comment.user.login }}
+    secrets:
+      STDLIB_BOT_GITHUB_TOKEN: ${{ secrets.STDLIB_BOT_GITHUB_TOKEN }}
 
   # Define a job for updating copyright header years:
   update_copyright_years:
