name: request-dataplane-review

on:
  pull_request:
    types: [ opened, synchronize, reopened, ready_for_review ]
    paths:
      - ".github/workflows/request-dataplane-review.yml"
      - "**/*derp*"
      - "**/derp*/**"
      - "!**/depaware.txt"

jobs:
  request-dataplane-review:
    if: github.event.pull_request.draft == false
    name: Request Dataplane Review
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Get access token
        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
        id: generate-token
        with:
          # Get token for app: https://github.com/apps/change-visibility-bot
          app-id: ${{ secrets.VISIBILITY_BOT_APP_ID }}
          private-key: ${{ secrets.VISIBILITY_BOT_APP_PRIVATE_KEY }}
      - name: Add reviewers
        env:
          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
          url: ${{ github.event.pull_request.html_url }}
        run: |
          gh pr edit "$url" --add-reviewer tailscale/dataplane
