Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This starts validating the CODEOWNERS file using https://github.com/mszostok/codeowners-validator and, because that project doesn't support it yet, a custom script to make sure that everybody has write access.
To make this work, I introduced the
OWNERS_VALIDATOR_GITHUB_SECRET
secret to contain a read-only personal access token of mine for now (expires in 30 days). This is needed because it's not possible to query for who has write access without that. In the future we should switch to a GitHub App instead.Because we need to switch to
pull_request_target
to trigger CI, I had to test this in a separate PR, but it works:Furthermore, the check to make sure everybody has write access is also run in the regular monthly review, which I can confirm to work correctly: