backport-trigger.yml

name: Backport Trigger

on:
  issue_comment:
    types: [created]

jobs:
  setupBackport:
    runs-on: ubuntu-latest
    # GITHUB_TOKEN change from read-write to read-only on 2024-02-01 requires permissions block
    # https://docs.opensource.microsoft.com/github/apps/permission-changes/
    # https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
    permissions:
      actions: write
      contents: read
      security-events: write
    if: github.event.issue.pull_request != '' && startswith(github.event.comment.body, '/sudo backport')
    outputs:
      target_branch: ${{ steps.parse_comment.outputs.target_branch }}
    steps:
      - name: Parse Comment
        id: parse_comment
        run: |
          Write-Host "Parsing $env:COMMENT"
          ($botName, $backport, $backportTargetBranch) = [System.Text.RegularExpressions.Regex]::Split("$env:COMMENT", "\s+")
          echo "::set-output name=target_branch::$backportTargetBranch"
        shell: pwsh
        env:
          COMMENT: "${{ github.event.comment.body }}"

  launchBackportBuild:
    needs: setupBackport
    uses: xamarin/backport-bot-action/.github/workflows/backport-action.yml@v1.1
    with:
      pull_request_url: ${{ github.event.issue.pull_request.url }}
      target_branch: ${{ needs.setupBackport.outputs.target_branch }}
      comment_author: ${{ github.actor }}
      github_repository: ${{ github.repository }}
      use_fork: true
    secrets:
      ado_organization: ${{ secrets.ADO_PROJECTCOLLECTION }}
      ado_project: ${{ secrets.ADO_PROJECT }}
      backport_pipeline_id: ${{ secrets.BACKPORT_PIPELINEID }}
      ado_build_pat: ${{ secrets.ADO_BUILDPAT }}
      github_account_pat: ${{ secrets.SERVICEACCOUNT_PAT }}