feat(rulesets): add support for PR labeled events

api/build/approve.go

@@ -86,17 +86,26 @@ func ApproveBuild(c *gin.Context) {
 		"user": u.GetName(),
 	})
 
+	// verify build is in correct status
 	if !strings.EqualFold(b.GetStatus(), constants.StatusPendingApproval) {
 		retErr := fmt.Errorf("unable to approve build %s/%d: build not in pending approval state", r.GetFullName(), b.GetNumber())
 		util.HandleError(c, http.StatusBadRequest, retErr)
 
 		return
 	}
 
+	// verify user is not the sender of the build
+	if strings.EqualFold(u.GetName(), b.GetSender()) {
+		retErr := fmt.Errorf("unable to approve build %s/%d: approver cannot be the sender of the build", r.GetFullName(), b.GetNumber())
+		util.HandleError(c, http.StatusBadRequest, retErr)
+
+		return
+	}
+
 	logger.Debugf("user %s approved build %s/%d for execution", u.GetName(), r.GetFullName(), b.GetNumber())
 
 	// send API call to capture the repo owner
-	u, err := database.FromContext(c).GetUser(ctx, r.GetUserID())
+	owner, err := database.FromContext(c).GetUser(ctx, r.GetUserID())
 	if err != nil {
 		retErr := fmt.Errorf("unable to get owner for %s: %w", r.GetFullName(), err)
 
@@ -105,6 +114,7 @@ func ApproveBuild(c *gin.Context) {
 		return
 	}
 
+	// set fields
 	b.SetStatus(constants.StatusPending)
 	b.SetApprovedAt(time.Now().Unix())
 	b.SetApprovedBy(u.GetName())
@@ -122,7 +132,7 @@ func ApproveBuild(c *gin.Context) {
 		database.FromContext(c),
 		b,
 		r,
-		u,
+		owner,
 		b.GetHost(),
 	)
 

api/webhook/post.go

@@ -505,6 +505,7 @@ func PostWebhook(c *gin.Context) {
 			WithMetadata(m).
 			WithRepo(repo).
 			WithUser(u).
+			WithLabel(webhook.PullRequest.Label).
 			Compile(config)
 		if err != nil {
 			// format the error message with extra information

compiler/engine.go

@@ -140,6 +140,9 @@ type Engine interface {
 	// WithUser defines a function that sets
 	// the library user type in the Engine.
 	WithUser(*library.User) Engine
+	// WithLabel defines a function that sets
+	// the label in the Engine.
+	WithLabel(string) Engine
 	// WithUser defines a function that sets
 	// the private github client in the Engine.
 	WithPrivateGitHub(string, string) Engine

compiler/native/compile.go

@@ -70,6 +70,7 @@
 		Repo:    c.repo.GetFullName(),
 		Tag:     strings.TrimPrefix(c.build.GetRef(), "refs/tags/"),
 		Target:  c.build.GetDeploy(),
+		Label:   c.label,
 	}
 
 	switch {

compiler/native/native.go

@@ -42,6 +42,7 @@ type client struct {
 	metadata       *types.Metadata
 	repo           *library.Repo
 	user           *library.User
+	label          string
 }
 
 // New returns a Pipeline implementation that integrates with the supported registries.
@@ -210,3 +211,12 @@ func (c *client) WithUser(u *library.User) compiler.Engine {
 
 	return c
 }
+
+// WithComment sets the comment in the Engine.
+func (c *client) WithLabel(label string) compiler.Engine {
+	if label != "" {
+		c.label = label
+	}
+
+	return c
+}

database/repo/repo_test.go

@@ -216,6 +216,7 @@
 			Edited:      new(bool),
 			Synchronize: new(bool),
 			Reopened:    new(bool),
+			Labeled:     new(bool),
 		},
 		Deployment: &actions.Deploy{
 			Created: new(bool),

database/secret/secret_test.go

@@ -241,7 +241,8 @@
 			Edited:      new(bool),
 			Synchronize: new(bool),
 			Reopened:    new(bool),
+			Labeled:     new(bool),
 		},
 		Deployment: &actions.Deploy{
 			Created: new(bool),
 		},

scm/github/webhook.go

@@ -250,11 +250,12 @@
 		return &types.Webhook{Hook: h}, nil
 	}
 
-	// skip if the pull request action is not opened, synchronize, reopened, or edited
+	// skip if the pull request action is not opened, synchronize, reopened, edited, or labeled
 	if !strings.EqualFold(payload.GetAction(), "opened") &&
 		!strings.EqualFold(payload.GetAction(), "synchronize") &&
 		!strings.EqualFold(payload.GetAction(), "reopened") &&
-		!strings.EqualFold(payload.GetAction(), "edited") {
+		!strings.EqualFold(payload.GetAction(), "edited") &&
+		!strings.EqualFold(payload.GetAction(), "labeled") {
 		return &types.Webhook{Hook: h}, nil
 	}
 
@@ -317,6 +318,7 @@
 		PullRequest: types.PullRequest{
 			Number:     payload.GetNumber(),
 			IsFromFork: fromFork,
+			Label:      payload.GetLabel().GetName(),
 		},
 		Hook:  h,
 		Repo:  r,