netbox/.github/workflows/vouch-check-pr.yml

# vouch (https://github.com/mitchellh/vouch)
name: Vouch - Check PR

on:
  pull_request_target:
    types: [opened, reopened]

permissions:
  contents: read
  pull-requests: write

jobs:
  check:
    if: github.repository == 'netbox-community/netbox'
    runs-on: ubuntu-latest
    steps:
      # Check out the base branch (never the PR head) to read the response template
      - name: Check out repo
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
          sparse-checkout: .github/vouch-pr-unvouched-message
          sparse-checkout-cone-mode: false

      - name: Check PR author
        uses: mitchellh/vouch/action/check-pr@d66fa29a64600490892131ad87597c30c91fcac4 # v1.5.0
        with:
          pr-number: ${{ github.event.pull_request.number }}
          auto-close: true
          template-file: .github/vouch-pr-unvouched-message
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}