V next

.github/workflows/auto-approve.yml

@@ -1,12 +1,15 @@
 name: auto-approve
 on:
-  pull_request_target:
+  pull_request:
     types:
       - labeled
       - opened
       - synchronize
       - reopened
       - ready_for_review
+
+permissions: {}
+
 jobs:
   approve:
     runs-on: ubuntu-latest

.github/workflows/build.yml

@@ -7,6 +7,7 @@ on:
     paths:
       - app-src/**
       - cdk/**
+      - .github/workflows/**
 
 permissions: {}
 

.github/workflows/review.yml

@@ -4,15 +4,22 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions: {}
+
 jobs:
   review:
     runs-on: ubuntu-latest
     steps:
-      - name: Check if review was approved by specific user
+      - name: Set approval status
+        id: check_approval
         run: |
-            if [[ github.event.review.state == 'approved' && github.event.review.user.login == 'hakenmt' ]]; then
-                echo "✅ Test a since review was performed by an allowed user."
-            else
-                "🚨 Workflow requires admin review approval."
-                exit 1
-            fi
+          if [[ "${GITHUB_EVENT_REVIEW_STATE}" == "approved" && ("${GITHUB_EVENT_REVIEW_USER_LOGIN}" == "hakenmt" || "${GITHUB_EVENT_REVIEW_USER_LOGIN}" == "github-actions[bot]") ]]; then
+              echo "✅ Test a since review was performed by an allowed user."
+              echo "approved=true" >> $GITHUB_ENV
+          else
+              echo "🚨 Workflow requires admin review approval."
+              exit 1
+          fi
+        env:
+          GITHUB_EVENT_REVIEW_STATE: ${{ github.event.review.state }}
+          GITHUB_EVENT_REVIEW_USER_LOGIN: ${{ github.event.review.user.login }}

README.md

@@ -1,4 +1,4 @@
-[Build Workflow](https://github.com/awslabs/multi-az-workshop/actions/workflows/build.yml/badge.svg) [Test Workflow](https://github.com/awslabs/multi-az-workshop/actions/workflows/test.yml/badge.svg) [Publish Workflow](https://github.com/awslabs/multi-az-workshop/actions/workflows/publish.yml/badge.svg)
+![Build Workflow](https://github.com/awslabs/multi-az-workshop/actions/workflows/build.yml/badge.svg) ![Test Workflow](https://github.com/awslabs/multi-az-workshop/actions/workflows/test.yml/badge.svg) ![Publish Workflow](https://github.com/awslabs/multi-az-workshop/actions/workflows/publish.yml/badge.svg)
 
 ## Advanced Multi-AZ Resilience Patterns
 ### Building, operating, and testing resilient multi-AZ applications