ci: remove vouch-based contributor filtering workflows
Removes the automated vouch system that filtered issues and PRs from non-vouched users. This simplifies the contribution process by removing the requirement for maintainers to manually vouch contributors before they can participate.
This commit is contained in:
Dax Raad
41
.github/VOUCHED.td
vendored
41
.github/VOUCHED.td
vendored
@@ -1,41 +0,0 @@
|
|||||||
# Vouched contributors for this project.
|
|
||||||
#
|
|
||||||
# See https://github.com/mitchellh/vouch for details.
|
|
||||||
#
|
|
||||||
# Syntax:
|
|
||||||
# - One handle per line (without @), sorted alphabetically.
|
|
||||||
# - Optional platform prefix: platform:username (e.g., github:user).
|
|
||||||
# - Denounce with minus prefix: -username or -platform:username.
|
|
||||||
# - Optional details after a space following the handle.
|
|
||||||
adamdotdevin
|
|
||||||
-agusbasari29 AI PR slop
|
|
||||||
ariane-emory
|
|
||||||
-atharvau AI review spamming literally every PR
|
|
||||||
-borealbytes
|
|
||||||
-carycooper777
|
|
||||||
-danieljoshuanazareth
|
|
||||||
-danieljoshuanazareth
|
|
||||||
-davidbernat looks to be a clawdbot that spams team and sends super weird emails, doesnt appear to be a real person
|
|
||||||
dmtrkovalenko
|
|
||||||
edemaine
|
|
||||||
fahreddinozcan
|
|
||||||
-florianleibert
|
|
||||||
fwang
|
|
||||||
iamdavidhill
|
|
||||||
jayair
|
|
||||||
kitlangton
|
|
||||||
kommander
|
|
||||||
-opencode2026
|
|
||||||
-opencodeengineer bot that spams issues
|
|
||||||
r44vc0rp
|
|
||||||
rekram1-node
|
|
||||||
-ricardo-m-l
|
|
||||||
-robinmordasiewicz
|
|
||||||
rubdos
|
|
||||||
-saisharan0103 spamming ai prs
|
|
||||||
shantur
|
|
||||||
simonklee
|
|
||||||
-spider-yamet clawdbot/llm psychosis, spam pinging the team
|
|
||||||
-terisuke
|
|
||||||
thdxr
|
|
||||||
-toastythebot
|
|
||||||
116
.github/workflows/vouch-check-issue.yml
vendored
116
.github/workflows/vouch-check-issue.yml
vendored
@@ -1,116 +0,0 @@
|
|||||||
name: vouch-check-issue
|
|
||||||
|
|
||||||
on:
|
|
||||||
issues:
|
|
||||||
types: [opened]
|
|
||||||
|
|
||||||
permissions:
|
|
||||||
contents: read
|
|
||||||
issues: write
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
check:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Check if issue author is denounced
|
|
||||||
uses: actions/github-script@v7
|
|
||||||
with:
|
|
||||||
script: |
|
|
||||||
const author = context.payload.issue.user.login;
|
|
||||||
const issueNumber = context.payload.issue.number;
|
|
||||||
|
|
||||||
// Skip bots
|
|
||||||
if (author.endsWith('[bot]')) {
|
|
||||||
core.info(`Skipping bot: ${author}`);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
// Read the VOUCHED.td file via API (no checkout needed)
|
|
||||||
let content;
|
|
||||||
try {
|
|
||||||
const response = await github.rest.repos.getContent({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
path: '.github/VOUCHED.td',
|
|
||||||
});
|
|
||||||
content = Buffer.from(response.data.content, 'base64').toString('utf-8');
|
|
||||||
} catch (error) {
|
|
||||||
if (error.status === 404) {
|
|
||||||
core.info('No .github/VOUCHED.td file found, skipping check.');
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
throw error;
|
|
||||||
}
|
|
||||||
|
|
||||||
// Parse the .td file for vouched and denounced users
|
|
||||||
const vouched = new Set();
|
|
||||||
const denounced = new Map();
|
|
||||||
for (const line of content.split('\n')) {
|
|
||||||
const trimmed = line.trim();
|
|
||||||
if (!trimmed || trimmed.startsWith('#')) continue;
|
|
||||||
|
|
||||||
const isDenounced = trimmed.startsWith('-');
|
|
||||||
const rest = isDenounced ? trimmed.slice(1).trim() : trimmed;
|
|
||||||
if (!rest) continue;
|
|
||||||
|
|
||||||
const spaceIdx = rest.indexOf(' ');
|
|
||||||
const handle = spaceIdx === -1 ? rest : rest.slice(0, spaceIdx);
|
|
||||||
const reason = spaceIdx === -1 ? null : rest.slice(spaceIdx + 1).trim();
|
|
||||||
|
|
||||||
// Handle platform:username or bare username
|
|
||||||
// Only match bare usernames or github: prefix (skip other platforms)
|
|
||||||
const colonIdx = handle.indexOf(':');
|
|
||||||
if (colonIdx !== -1) {
|
|
||||||
const platform = handle.slice(0, colonIdx).toLowerCase();
|
|
||||||
if (platform !== 'github') continue;
|
|
||||||
}
|
|
||||||
const username = colonIdx === -1 ? handle : handle.slice(colonIdx + 1);
|
|
||||||
if (!username) continue;
|
|
||||||
|
|
||||||
if (isDenounced) {
|
|
||||||
denounced.set(username.toLowerCase(), reason);
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
vouched.add(username.toLowerCase());
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if the author is denounced
|
|
||||||
const reason = denounced.get(author.toLowerCase());
|
|
||||||
if (reason !== undefined) {
|
|
||||||
// Author is denounced — close the issue
|
|
||||||
const body = 'This issue has been automatically closed.';
|
|
||||||
|
|
||||||
await github.rest.issues.createComment({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
issue_number: issueNumber,
|
|
||||||
body,
|
|
||||||
});
|
|
||||||
|
|
||||||
await github.rest.issues.update({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
issue_number: issueNumber,
|
|
||||||
state: 'closed',
|
|
||||||
state_reason: 'not_planned',
|
|
||||||
});
|
|
||||||
|
|
||||||
core.info(`Closed issue #${issueNumber} from denounced user ${author}`);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
// Author is positively vouched — add label
|
|
||||||
if (!vouched.has(author.toLowerCase())) {
|
|
||||||
core.info(`User ${author} is not denounced or vouched. Allowing issue.`);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
await github.rest.issues.addLabels({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
issue_number: issueNumber,
|
|
||||||
labels: ['Vouched'],
|
|
||||||
});
|
|
||||||
|
|
||||||
core.info(`Added vouched label to issue #${issueNumber} from ${author}`);
|
|
||||||
114
.github/workflows/vouch-check-pr.yml
vendored
114
.github/workflows/vouch-check-pr.yml
vendored
@@ -1,114 +0,0 @@
|
|||||||
name: vouch-check-pr
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request_target:
|
|
||||||
types: [opened]
|
|
||||||
|
|
||||||
permissions:
|
|
||||||
contents: read
|
|
||||||
issues: write
|
|
||||||
pull-requests: write
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
check:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Check if PR author is denounced
|
|
||||||
uses: actions/github-script@v7
|
|
||||||
with:
|
|
||||||
script: |
|
|
||||||
const author = context.payload.pull_request.user.login;
|
|
||||||
const prNumber = context.payload.pull_request.number;
|
|
||||||
|
|
||||||
// Skip bots
|
|
||||||
if (author.endsWith('[bot]')) {
|
|
||||||
core.info(`Skipping bot: ${author}`);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
// Read the VOUCHED.td file via API (no checkout needed)
|
|
||||||
let content;
|
|
||||||
try {
|
|
||||||
const response = await github.rest.repos.getContent({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
path: '.github/VOUCHED.td',
|
|
||||||
});
|
|
||||||
content = Buffer.from(response.data.content, 'base64').toString('utf-8');
|
|
||||||
} catch (error) {
|
|
||||||
if (error.status === 404) {
|
|
||||||
core.info('No .github/VOUCHED.td file found, skipping check.');
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
throw error;
|
|
||||||
}
|
|
||||||
|
|
||||||
// Parse the .td file for vouched and denounced users
|
|
||||||
const vouched = new Set();
|
|
||||||
const denounced = new Map();
|
|
||||||
for (const line of content.split('\n')) {
|
|
||||||
const trimmed = line.trim();
|
|
||||||
if (!trimmed || trimmed.startsWith('#')) continue;
|
|
||||||
|
|
||||||
const isDenounced = trimmed.startsWith('-');
|
|
||||||
const rest = isDenounced ? trimmed.slice(1).trim() : trimmed;
|
|
||||||
if (!rest) continue;
|
|
||||||
|
|
||||||
const spaceIdx = rest.indexOf(' ');
|
|
||||||
const handle = spaceIdx === -1 ? rest : rest.slice(0, spaceIdx);
|
|
||||||
const reason = spaceIdx === -1 ? null : rest.slice(spaceIdx + 1).trim();
|
|
||||||
|
|
||||||
// Handle platform:username or bare username
|
|
||||||
// Only match bare usernames or github: prefix (skip other platforms)
|
|
||||||
const colonIdx = handle.indexOf(':');
|
|
||||||
if (colonIdx !== -1) {
|
|
||||||
const platform = handle.slice(0, colonIdx).toLowerCase();
|
|
||||||
if (platform !== 'github') continue;
|
|
||||||
}
|
|
||||||
const username = colonIdx === -1 ? handle : handle.slice(colonIdx + 1);
|
|
||||||
if (!username) continue;
|
|
||||||
|
|
||||||
if (isDenounced) {
|
|
||||||
denounced.set(username.toLowerCase(), reason);
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
vouched.add(username.toLowerCase());
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if the author is denounced
|
|
||||||
const reason = denounced.get(author.toLowerCase());
|
|
||||||
if (reason !== undefined) {
|
|
||||||
// Author is denounced — close the PR
|
|
||||||
await github.rest.issues.createComment({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
issue_number: prNumber,
|
|
||||||
body: 'This pull request has been automatically closed.',
|
|
||||||
});
|
|
||||||
|
|
||||||
await github.rest.pulls.update({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
pull_number: prNumber,
|
|
||||||
state: 'closed',
|
|
||||||
});
|
|
||||||
|
|
||||||
core.info(`Closed PR #${prNumber} from denounced user ${author}`);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
// Author is positively vouched — add label
|
|
||||||
if (!vouched.has(author.toLowerCase())) {
|
|
||||||
core.info(`User ${author} is not denounced or vouched. Allowing PR.`);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
await github.rest.issues.addLabels({
|
|
||||||
owner: context.repo.owner,
|
|
||||||
repo: context.repo.repo,
|
|
||||||
issue_number: prNumber,
|
|
||||||
labels: ['Vouched'],
|
|
||||||
});
|
|
||||||
|
|
||||||
core.info(`Added vouched label to PR #${prNumber} from ${author}`);
|
|
||||||
38
.github/workflows/vouch-manage-by-issue.yml
vendored
38
.github/workflows/vouch-manage-by-issue.yml
vendored
@@ -1,38 +0,0 @@
|
|||||||
name: vouch-manage-by-issue
|
|
||||||
|
|
||||||
on:
|
|
||||||
issue_comment:
|
|
||||||
types: [created]
|
|
||||||
|
|
||||||
concurrency:
|
|
||||||
group: vouch-manage
|
|
||||||
cancel-in-progress: false
|
|
||||||
|
|
||||||
permissions:
|
|
||||||
contents: write
|
|
||||||
issues: write
|
|
||||||
pull-requests: read
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
manage:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
with:
|
|
||||||
persist-credentials: false
|
|
||||||
fetch-depth: 0
|
|
||||||
|
|
||||||
- name: Setup git committer
|
|
||||||
id: committer
|
|
||||||
uses: ./.github/actions/setup-git-committer
|
|
||||||
with:
|
|
||||||
opencode-app-id: ${{ vars.OPENCODE_APP_ID }}
|
|
||||||
opencode-app-secret: ${{ secrets.OPENCODE_APP_SECRET }}
|
|
||||||
|
|
||||||
- uses: mitchellh/vouch/action/manage-by-issue@main
|
|
||||||
with:
|
|
||||||
issue-id: ${{ github.event.issue.number }}
|
|
||||||
comment-id: ${{ github.event.comment.id }}
|
|
||||||
roles: admin,maintain,write
|
|
||||||
env:
|
|
||||||
GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
|
|
||||||
Reference in New Issue
Block a user