ci: fix cla and dependabot notifications

matifali · web-flow · commit cfb86ab0ea17 · 2025-01-30T17:25:30.000+05:00
diff --git a/.github/workflows/contrib.yaml b/.github/workflows/contrib.yaml
@@ -2,19 +2,24 @@ name: contrib
 
 on:
   issue_comment:
-    types: [created]
-  pull_request:
+    types: [created, edited]
+  pull_request_target: # for community 
     types:
       - opened
       - closed
       - synchronize
       - labeled
       - unlabeled
-      - opened
       - reopened
       - edited
       # For jobs that don't run on draft PRs.
       - ready_for_review
+  pull_request: # for dependabot PRs
+    types:
+      - opened
+  push:
+    branches:
+      - main
 
 permissions:
   contents: read
@@ -43,7 +48,7 @@ jobs:
           PR_URL: ${{github.event.pull_request.html_url}}
           GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
-      - name: Enable auto-merge for Dependabot PRs
+      - name: Enable auto-merge
         run: gh pr merge --auto --squash "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
@@ -52,7 +57,7 @@ jobs:
   dependabot-automerge-notify:
     # Send a slack notification when a dependabot PR is merged.
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'coder/coder' && github.event.pull_request.merged
+    if: github.event_name == 'push' && github.actor == 'github-actions[bot]'
     steps:
       - name: Send Slack notification
         env:
@@ -104,7 +109,7 @@ jobs:
       pull-requests: write
     steps:
       - name: cla
-        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request'
+        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
         uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
