<div id="readability-page-1" class="page"><div><div><nav aria-label="breadcrumb"><ol itemscope="" itemtype="http://schema.org/BreadcrumbList"><li itemprop="itemListElement" itemscope="" itemtype="http://schema.org/ListItem"><a itemtype="http://schema.org/Thing" itemprop="item" href="/ko/">Home</a><meta itemprop="position" content="1"></li><li itemprop="itemListElement" itemscope="" itemtype="http://schema.org/ListItem"><a itemtype="http://schema.org/Thing" itemprop="item" href="/ko/share">share</a><meta itemprop="position" content="2"></li><li aria-current="page" itemprop="itemListElement" itemscope="" itemtype="http://schema.org/ListItem"><a itemtype="http://schema.org/Thing" itemprop="item" href="/ko/share/github-actions/set-assignees/">[GitHub Actions] Assignees 자동 설정</a><meta itemprop="position" content="3"></li></ol></nav></div><div><article><div id="contents_list"><h2 id="section">목차</h2><ul><li><a href="#%EA%B0%9C%EC%9A%94">개요</a></li><li><a href="#github-actions-%EC%83%9D%EC%84%B1">GitHub Actions 생성</a></li><li><a href="#dependabot%EC%9A%A9-github-actions">Dependabot용 GitHub Actions</a></li><li><a href="#actionsgithub-script">actions/github-script</a></li><li><a href="#%EC%99%84%EB%A3%8C">완료</a></li></ul></div><h2 id="개요">개요</h2><code>GitHub</code>에서 <code>Pull request</code>를 생성할 때, 다음과 같이 <code>Assignees</code>에 수동으로 <code>Pull request</code>를 생성한 사람을 설정하고 있었습니다.<picture><source srcset="/assets/images/category/share/2024/set-assignees/pull_request_assignees.avif" type="image/avif"><source srcset="/assets/images/category/share/2024/set-assignees/pull_request_assignees.webp" type="image/webp"><img src="https://deku.posstree.com/assets/images/category/share/2024/set-assignees/pull_request_assignees.png" alt="GitHub Actions - Set assignees"></picture><code>Pull request</code>의 <code>Assignees</code>는 결국 <code>Pull request</code>를 생성한 사람이므로 <code>Pull request</code>를 생성할 때마다 <code>Assignees</code>에 <code>Pull request</code>를 생성한 사람을 자동으로 설정하면 좋겠다고 생각했습니다.이번 블로그 포스트에서는 <code>GitHub Actions</code>를 사용하여 <code>Pull request</code>의 <code>Assignees</code>에 <code>Pull request</code>를 생성한 사람을 자동으로 설정하는 방법에 대해서 알아보겠습니다.<h2 id="github-actions-생성">GitHub Actions 생성</h2>그럼 <code>Pull request</code>의 <code>Assignees</code>에 <code>Pull request</code>를 생성한 사람을 자동으로 설정하는 <code>GitHub Actions</code>를 만들어 봅시다. <code>.github/workflows/set_assignees.yml</code> 파일을 생성하고 다음과 같이 수정합니다.<div><pre><code>name: Set assigness

on:
 pull_request:
 types:
 - opened

jobs:
 set-assignees:
 name: Set assignees
 runs-on: ubuntu-latest
 timeout-minutes: 1
 steps:
 - name: Set assignees
 run: |
 OWNER="$"
 REPOSITORY="$"
 TOKEN="$"
 PULL_REQUEST_NUMBER="$"

 ASSIGNEES=$(curl -s \
 "https://api.github.com/repos/$OWNER/$REPOSITORY/issues/$PULL_REQUEST_NUMBER" | \
 jq --raw-output '.assignees // [] | .[].login')

 if [ -z "$ASSIGNEES" ]; then
 ASSIGNEE=$

 curl -X POST \
 -H "Content-Type: application/json" \
 -H "Authorization: token $TOKEN" \
 -d "{ \"assignees\": \"${ASSIGNEE}\" }" \
 https://api.github.com/repos/$REPOSITORY/issues/$PULL_REQUEST_NUMBER/assignees
 fi
</code></pre></div><code>GitHub</code>가 제공해는 <code>API</code>를 사용하여 <code>Pull request</code>의 <code>Assignees</code>에 <code>Pull request</code>를 생성한 사람(<code>github.actor</code>)을 설정하도록 만들었습니다.<ul><li>공식 문서: <a href="https://docs.github.com/en/rest/issues/assignees?apiVersion=2022-11-28#list-assignees" rel="nofollow noreferrer" target="\_blank">List assignees</a></li><li>공식 문서: <a href="https://docs.github.com/en/rest/issues/assignees?apiVersion=2022-11-28#add-assignees-to-an-issue" rel="nofollow noreferrer" target="\_blank">Add assignees to an issue</a></li></ul><h2 id="dependabot용-github-actions">Dependabot용 GitHub Actions</h2>저는 개인 프로젝트에서 <a href="https://docs.github.com/en/code-security/dependabot/working-with-dependabot" rel="nofollow noreferrer" target="\_blank">Dependabot</a>을 사용하고 있습니다. <code>Dependabot</code>이 생성한 <code>Pull request</code>에 프로젝트 <code>Owner</code>를 <code>Assignees</code>에 설정하고 싶었습니다.이를 위해서 <code>GitHub Actions</code>를 다음과 같이 수정하였습니다.<div><pre><code>name: Set assigness

on:
 pull_request:
 types:
 - opened

jobs:
 set-assignees:
 name: Set assignees
 runs-on: ubuntu-latest
 timeout-minutes: 1
 steps:
 - name: Set assignees
 run: |
 OWNER="$"
 REPOSITORY="$"
 TOKEN="$"
 PULL_REQUEST_NUMBER="$"

 ASSIGNEES=$(curl -s \
 "https://api.github.com/repos/$OWNER/$REPOSITORY/issues/$PULL_REQUEST_NUMBER" | \
 jq --raw-output '.assignees // [] | .[].login')

 if [ -z "$ASSIGNEES" ]; then
 ASSIGNEE=$
 BRANCH_NAME=$

 if [[ "${BRANCH_NAME}" == "dependabot/"* ]]; then
 ASSIGNEE=$OWNER
 fi

 curl -X POST \
 -H "Content-Type: application/json" \
 -H "Authorization: token $TOKEN" \
 -d "{ \"assignees\": \"${ASSIGNEE}\" }" \
 https://api.github.com/repos/$REPOSITORY/issues/$PULL_REQUEST_NUMBER/assignees
 fi
</code></pre></div>추가한 내용은 다음과 같이 <code>branch</code> 이름이 <code>dependabot/</code>으로 시작하는 경우, <code>Assignees</code>에 <code>github.repository_owner</code>를 설정하도록 만들었습니다.<div><pre><code>BRANCH_NAME=$

if [[ "${BRANCH_NAME}" == "dependabot/"* ]]; then
 ASSIGNEE=$OWNER
fi
</code></pre></div>하지만 이 <code>GitHub Actions</code>는 <code>Dependabot</code>의 <code>Pull request</code>에서 정상 동작하지 않았습니다. 보안상에 이유로 <code>Dependabot</code>의 <code>Pull request</code>에서는 그 어떤 <code>secrets</code>도 사용할 수 없으며, <code>Readonly</code> 동작만 가능하기 때문에 에러가 발생하였습니다.이를 수정하기 위해서는 <code>on</code>에 <code>pull_request</code> 대신 <code>pull_request_target</code>을 사용하도록 수정해야 합니다.<ul><li><a href="https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/" rel="nofollow noreferrer" target="\_blank">GitHub Actions: Workflows triggered by Dependabot PRs will run with read-only permissions</a></li><li><a href="https://securitylab.github.com/research/github-actions-preventing-pwn-requests/" rel="nofollow noreferrer" target="\_blank">Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests</a></li></ul><div><pre><code>name: Set assigness

on:
 pull_request_target:
 types:
 - opened
</code></pre></div><h2 id="actionsgithub-script">actions/github-script</h2><code>GitHub</code>에서 제공하는 <code>actions/github-script</code>를 사용하면 좀 더 읽기 쉬운 코드를 작성할 수 있습니다.<ul><li><a href="https://github.com/actions/github-script" rel="nofollow noreferrer" target="\_blank">actions/github-script</a></li></ul><code>actions/github-script</code>를 사용하면 다음과 같이 수정할 수 있습니다.<div><pre><code>name: Set assignees

on:
 pull_request_target:
 types:
 - opened

jobs:
 set-assignees:
 name: Set assignees
 runs-on: ubuntu-latest
 timeout-minutes: 1
 steps:
 - uses: actions/checkout@v4
 - name: Set assignees
 uses: actions/github-script@v6
 with:
 github-token: $
 script: |
 const { owner, repo } = context.repo;
 const prNumber = context.payload.pull_request.number;

 const response = await github.rest.issues.get({
 owner,
 repo,
 issue_number: prNumber,
 })
 const { assignees } = response.data;

 if (assignees.length === 0) {
 let assignee = context.actor;
 const branchName = context.payload.pull_request.head.ref;

 if (branchName.startsWith('dependabot/')) {
 assignee = owner;
 }

 await github.rest.issues.addAssignees({
 owner: owner,
 repo: repo,
 issue_number: prNumber,
 assignees: [assignee]
 });
 }
</code></pre></div><h2 id="완료">완료</h2>이것으로 <code>Pull request</code>의 <code>Assignees</code>에 <code>Pull request</code>를 생성한 사람을 자동으로 설정하는 <code>GitHub Actions</code>를 만들어보았습니다. <code>Pull request</code>를 생성할 때마다 <code>Assignees</code>에 <code>Pull request</code>를 생성한 사람을 등록하고 있다면, 이 <code>GitHub Actions</code>를 사용하여 자동화해 보시기 바랍니다.<code> 제 블로그가 도움이 되셨나요? 하단의 댓글을 달아주시면 저에게 큰 힘이 됩니다! </code><h2>앱 홍보</h2><div> 지금 보고 계신 블로그를 작성하는 <code>Deku</code>가 개발한 앱을 한번 사용해보세요. <code>Deku</code>가 개발한 앱은 Flutter로 개발되었습니다. 관심있으신 분들은 앱을 다운로드하여 사용해 주시면 정말 감사하겠습니다.</div><h2>책 홍보</h2></article></div></div></div>

dev-yakuza

GitHub Actions를 사용하여 Pull request의 Assignees에 Pull request를 생성한 사람을 자동으로 설정하는 방법에 대해서 알아보겠습니다.