check-pr-title.yml

name: Check PR title

on:
  pull_request_target:
    types:
      - opened
      - reopened
      - edited
      - synchronize

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - id: lint
        # SEE https://github.com/amannn/action-semantic-pull-request
        uses: amannn/action-semantic-pull-request@v5
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - uses: actions/github-script@v7.0.1
        if: ${{ failure() }}
        # do not use user injected variable values directly here as they are
        # open to injection attacks
        # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions
        env:
          TITLE: ${{ github.event.pull_request.title }}
          ERROR: ${{ steps.lint.outputs.error_message }}
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          # javascript
          script: |
            const output = `The pull-request title "${{ env.TITLE}}" does not apply to [Conventional Commit Guidelines](https://www.conventionalcommits.org).
            \`\`\`
            ${{ env.ERROR }}
            \`\`\`
            <sub>🤖 This comment was automatically created by the "${{github.workflow}}" workflow.</sup>`;
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: output
            })