When a developer edits a reviewer's approval comment, gh api .../reviews doesn't show it. Any other way to catch it?

[Bikram-DoorDash]

I'm building an automation tool where a PR is allowed to merge during work-hours if a manager approved the PR, along with a comment saying "EMERGENCY". If the comment in that approval doesn't say "EMERGENCY", the tool will block the PR from merging.

For this, I was using this command -
gh api repos/myorg/myrepo/pulls/22297/reviews --jq '.[] | select (.state == "APPROVED") | .user.login,.body'

i.e. selecting any review where approval is given, and getting the reviewer's id and the approval comment from that.

But I noticed that everyone is allowed to edit everyone's comment. So, a developer can edit the manager's comment to say EMERGENCY. The GitHub UI does show this edit.

But the gh api repos/myorg/myrepo/pulls/22297/reviews command doesn't show the edit at all.

gh api repos/myorg/myrepo/pulls/22297/reviews
[
  {
    "id": REDACTING,
    "node_id": "REDACTING",
    "user": {
      "login": "REDACTING",
      "id": REDACTING,
      "node_id": "REDACTING",
      "avatar_url": "https://avatars.githubusercontent.com/u/REDACTING?v=4",
      "gravatar_id": "",
      "url": "https://api.github.com/users/REDACTING",
      "html_url": "https://github.com/REDACTING",
      "followers_url": "https://api.github.com/users/REDACTING/followers",
      "following_url": "https://api.github.com/users/REDACTING/following{/other_user}",
      "gists_url": "https://api.github.com/users/REDACTING/gists{/gist_id}",
      "starred_url": "https://api.github.com/users/REDACTING/starred{/owner}{/repo}",
      "subscriptions_url": "https://api.github.com/users/REDACTING/subscriptions",
      "organizations_url": "https://api.github.com/users/REDACTING/orgs",
      "repos_url": "https://api.github.com/users/REDACTING/repos",
      "events_url": "https://api.github.com/users/REDACTING/events{/privacy}",
      "received_events_url": "https://api.github.com/users/REDACTING/received_events",
      "type": "User",
      "site_admin": false
    },
    "body": "EMERGENCY",
    "state": "APPROVED",
    "html_url": "https://github.com/myorg/myrepo/pull/22297#pullrequestreview-REDACTING",
    "pull_request_url": "https://api.github.com/repos/myorg/myrepo/pulls/22297",
    "author_association": "CONTRIBUTOR",
    "_links": {
      "html": {
        "href": "https://github.com/myorg/myrepo/pull/22297#pullrequestreview-REDACTING"
      },
      "pull_request": {
        "href": "https://api.github.com/repos/myorg/myrepo/pulls/22297"
      }
    },
    "submitted_at": "2023-08-24T18:49:02Z",
    "commit_id": "REDACTING"
  }
]

Thus, I have no way of knowing via this command that the approver's comment was edited by someone else.

Is there any other gh command or any other endpoint that can help in this scenario?

[samcoe]

@bikram-agarwal I don't think you can do what you are asking using the REST API but using the GraphQL API https://docs.github.com/en/graphql/reference/objects#pullrequestreview I think you should be able to.

[Bikram-DoorDash]

Thanks for the tip. I'm reading the documentation and the syntax looks much more complicated than gh. I'll try to learn and use it for my scenario.