From ef82435371f6a5b6fe88f760739f97efc3f53908 Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Mon, 7 Dec 2020 09:55:24 -0500
Subject: [PATCH 01/10] check repo

---
 tests/rendering/server.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tests/rendering/server.js b/tests/rendering/server.js
index 4be479a49f17..063b76c6347e 100644
--- a/tests/rendering/server.js
+++ b/tests/rendering/server.js
@@ -5,6 +5,8 @@ const path = require('path')
 const nonEnterpriseDefaultVersion = require('../../lib/non-enterprise-default-version')
 const { loadPages } = require('../../lib/pages')
 
+const describeInternalOnly = process.env.GITHUB_REPOSITORY === 'github/docs-internal' ? describe : describe.skip
+
 describe('server', () => {
   jest.setTimeout(60 * 1000)
 
@@ -356,7 +358,7 @@ describe('server', () => {
     })
   })
 
-  describe.skip('Early Access articles', () => {
+  describeInternalOnly('Early Access articles', () => {
     let hiddenPageHrefs, hiddenPages
 
     beforeAll(async (done) => {

From 797911dee334995e616a6c0fd7a60a0eedeb229c Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Mon, 7 Dec 2020 16:17:38 -0500
Subject: [PATCH 02/10] make Early Access banner more prominent

---
 data/ui.yml                       | 2 +-
 includes/header-notification.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/data/ui.yml b/data/ui.yml
index d144567335c1..32a89f27d7fa 100644
--- a/data/ui.yml
+++ b/data/ui.yml
@@ -17,7 +17,7 @@ header:
       still in translation. For the most up-to-date and accurate information,
       please visit our
       <a id="to-english-doc" href="/en">English documentation</a>.
-    early_access: 👋 This page contains content about an early access feature. Please do not share this URL publicly.
+    early_access: 📣 Please <b>do not share</b> this URL publicly. This page contains content about an early access feature.
 search:
   need_help: Need help?
   placeholder: Search topics, products...
diff --git a/includes/header-notification.html b/includes/header-notification.html
index 7c65d65ba364..ed50ce780c54 100644
--- a/includes/header-notification.html
+++ b/includes/header-notification.html
@@ -49,7 +49,7 @@
 {% endif %}
 
 {% if early_access_notification_type %}
-  <div class="header-notifications text-center f5 bg-blue-1 text-gray-dark py-4 px-6 early_access">
+  <div class="header-notifications text-center f5 bg-red-1 text-gray-dark py-4 px-6 early_access">
     {{ early_access_notification }}
   </div>
 {% endif %}
\ No newline at end of file

From dc38acdde8dd5594fcca412077a17773628e6ac6 Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Mon, 7 Dec 2020 16:18:03 -0500
Subject: [PATCH 03/10] support custom Early Access breadcrumbs

---
 includes/breadcrumbs.html                     |  4 +-
 middleware/breadcrumbs.js                     |  5 +-
 .../contextualizers/early-access-links.js     |  6 +-
 middleware/early-access-breadcrumbs.js        | 67 +++++++++++++++++++
 middleware/index.js                           |  1 +
 stylesheets/article.scss                      |  2 +-
 6 files changed, 78 insertions(+), 7 deletions(-)
 create mode 100644 middleware/early-access-breadcrumbs.js

diff --git a/includes/breadcrumbs.html b/includes/breadcrumbs.html
index 6d5607294922..47dc43c17a84 100644
--- a/includes/breadcrumbs.html
+++ b/includes/breadcrumbs.html
@@ -1,7 +1,7 @@
 <nav class="breadcrumbs f5" aria-label="Breadcrumb">
   {% for breadcrumb in breadcrumbs %}
-  {% if page.hidden %}
-  <span class="d-inline-block">{{breadcrumb[1].title}}</span>
+  {% if breadcrumb[1].href == '' %}
+  <span>{{breadcrumb[1].title}}</span>
   {% else %}
   <a title="{{ breadcrumb[0]}}: {{breadcrumb[1].title}}" href="/{{currentLanguage}}{{breadcrumb[1].href}}" class="d-inline-block {% if breadcrumb[1].href == currentPathWithoutLanguage %}text-gray-light{% endif %}">
     {{breadcrumb[1].title}}</a>
diff --git a/middleware/breadcrumbs.js b/middleware/breadcrumbs.js
index a72baae3d843..52d1af2a497e 100644
--- a/middleware/breadcrumbs.js
+++ b/middleware/breadcrumbs.js
@@ -2,11 +2,12 @@ const path = require('path')
 const { getPathWithoutLanguage } = require('../lib/path-utils')
 
 module.exports = async (req, res, next) => {
-  req.context.breadcrumbs = {}
-
   if (!req.context.page) return next()
+  if (req.context.page.hidden) return next()
   if (req.context.page.relativePath === 'index.md') return next()
 
+  req.context.breadcrumbs = {}
+
   const rawPath = getPathWithoutLanguage(req.path)
   const pathParts = rawPath.split('/')
 
diff --git a/middleware/contextualizers/early-access-links.js b/middleware/contextualizers/early-access-links.js
index 4a63a3cd7a84..056efe45863f 100644
--- a/middleware/contextualizers/early-access-links.js
+++ b/middleware/contextualizers/early-access-links.js
@@ -1,10 +1,12 @@
+const { uniq } = require('lodash')
+
 module.exports = function earlyAccessContext (req, res, next) {
   if (process.env.NODE_ENV === 'production') {
     return next(404)
   }
 
   // Get a list of all hidden pages per version
-  const earlyAccessPageLinks = req.context.pages
+  const earlyAccessPageLinks = uniq(Object.values(req.context.pages)
     .filter(page => page.hidden)
     // Do not include early access landing page
     .filter(page => page.relativePath !== 'early-access/index.md')
@@ -12,7 +14,7 @@ module.exports = function earlyAccessContext (req, res, next) {
     .map(page => {
       return page.permalinks.map(permalink => `- [${permalink.title}](${permalink.href})`)
     })
-    .flat()
+    .flat())
     // Get links for the current version
     .filter(link => link.includes(req.context.currentVersion))
     .sort()
diff --git a/middleware/early-access-breadcrumbs.js b/middleware/early-access-breadcrumbs.js
new file mode 100644
index 000000000000..5f31bee03bee
--- /dev/null
+++ b/middleware/early-access-breadcrumbs.js
@@ -0,0 +1,67 @@
+const path = require('path')
+const { getPathWithoutLanguage } = require('../lib/path-utils')
+
+module.exports = async (req, res, next) => {
+  if (!req.context.page) return next()
+  if (!req.context.page.hidden) return next()
+
+  req.context.breadcrumbs = {}
+
+  const earlyAccessProduct = req.context.siteTree[req.language][req.context.currentVersion].products[req.context.currentProduct]
+
+  req.context.breadcrumbs.earlyAccessProduct = {
+    href: '', // no link for the EA product breadcrumb
+    title: earlyAccessProduct.title
+  }
+
+  const rawPath = getPathWithoutLanguage(req.path)
+  const pathParts = rawPath.split('/')
+
+  // drop first '/'
+  pathParts.shift()
+
+  // drop the version and early-accesss segments so pathParts now starts with /product
+  pathParts.shift()
+  pathParts.shift()
+
+  // Early Access products do not require an index.md, so look for a matching public product
+  const product = req.context.siteTree[req.language][req.context.currentVersion].products[pathParts[0]]
+
+  if (!product) return next()
+
+  req.context.breadcrumbs.product = {
+    href: '', // no link for the EA product breadcrumbs
+    title: product.title
+  }
+
+  if (!pathParts[1]) return next()
+
+  // get Early Access category path
+  // e.g., `enforcing-best-practices-with-github-policies` in /free-pro-team@latest/early-access/github/enforcing-best-practices-with-github-policies
+  const categoryPath = path.posix.join('/', req.context.currentVersion, 'early-access', pathParts[0], pathParts[1])
+  const category = req.context.pages[path.posix.join('/en', categoryPath)]
+
+  if (!category) return next()
+
+  req.context.breadcrumbs.category = {
+    href: categoryPath, // do include a link for EA category breadcrumbs
+    title: category.shortTitle || category.title
+  }
+
+  if (!pathParts[2]) return next()
+
+  // for Early Access purposes, we don't need to differentiate between map topics and articles breadcrumbs
+  const mapTopicOrArticlePath = path.posix.join(categoryPath, pathParts[2])
+  const mapTopicOrArticle = req.context.pages[path.posix.join('/en', mapTopicOrArticlePath)]
+
+  if (!mapTopicOrArticle) return next()
+
+  const mapTopicOrArticleTitle = await mapTopicOrArticle.renderProp('shortTitle', req.context, { textOnly: true, encodeEntities: true })
+
+  req.context.breadcrumbs.article = {
+    href: mapTopicOrArticlePath, // do include a link for EA map topic/article breadcrumbs
+    title: mapTopicOrArticleTitle
+  }
+
+  return next()
+}
diff --git a/middleware/index.js b/middleware/index.js
index 1d3958a96f60..05175c31197c 100644
--- a/middleware/index.js
+++ b/middleware/index.js
@@ -73,6 +73,7 @@ module.exports = function (app) {
   app.use(require('./contextualizers/rest'))
   app.use(require('./contextualizers/webhooks'))
   app.use(require('./breadcrumbs'))
+  app.use(require('./early-access-breadcrumbs'))
   app.use(require('./dev-toc'))
   app.use(require('./featured-links'))
 
diff --git a/stylesheets/article.scss b/stylesheets/article.scss
index 96b85ae3aedb..e7de0d0ca61c 100644
--- a/stylesheets/article.scss
+++ b/stylesheets/article.scss
@@ -87,7 +87,7 @@
 /* Breadcrumbs
 ------------------------------------------------------------------------------*/
 
-.breadcrumbs a:not(:last-child)::after{
+.breadcrumbs a:not(:last-child)::after, .breadcrumbs span:not(:last-child)::after {
   content: '/';
   color: $gray-400;
   padding-right: $spacer-1;

From 2e8b8d38029d361b137a43ba4ecbdd1e63312277 Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Mon, 7 Dec 2020 16:18:11 -0500
Subject: [PATCH 04/10] test Early Access breadcrumbs

---
 tests/rendering/breadcrumbs.js | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/tests/rendering/breadcrumbs.js b/tests/rendering/breadcrumbs.js
index 3395ba626662..893685898cb2 100644
--- a/tests/rendering/breadcrumbs.js
+++ b/tests/rendering/breadcrumbs.js
@@ -1,6 +1,8 @@
 const { getDOM, getJSON } = require('../helpers/supertest')
 const nonEnterpriseDefaultVersion = require('../../lib/non-enterprise-default-version')
 
+const describeInternalOnly = process.env.GITHUB_REPOSITORY === 'github/docs-internal' ? describe : describe.skip
+
 describe('breadcrumbs', () => {
   jest.setTimeout(300 * 1000)
 
@@ -60,6 +62,27 @@ describe('breadcrumbs', () => {
     })
   })
 
+  describeInternalOnly('early access rendering', () => {
+    test('top-level product pages have breadcrumbs', async () => {
+      const $ = await getDOM('/early-access/github/articles/using-gist-playground')
+      expect($('.breadcrumbs')).toHaveLength(1)
+    })
+
+    test('early access article pages have breadcrumbs with product, category, and article', async () => {
+      const $ = await getDOM('/early-access/github/enforcing-best-practices-with-github-policies/about-github-policies')
+      const $breadcrumbSpans = $('.breadcrumbs span')
+      const $breadcrumbLinks = $('.breadcrumbs a')
+
+      expect($breadcrumbSpans).toHaveLength(2)
+      expect($breadcrumbLinks).toHaveLength(2)
+      expect($breadcrumbSpans.eq(0).text()).toBe('Early Access documentation')
+      expect($breadcrumbSpans.eq(1).text()).toBe('GitHub.com')
+      expect($breadcrumbLinks.eq(0).attr('title')).toBe('category: Enforcing best practices with GitHub Policies')
+      expect($breadcrumbLinks.eq(1).attr('title')).toBe('article: About GitHub Policies')
+      expect($breadcrumbLinks.eq(1).hasClass('text-gray-light')).toBe(true)
+    })
+  })
+
   describe('context.breadcrumbs object', () => {
     test('works on product index pages', async () => {
       const breadcrumbs = await getJSON('/en/github?json=breadcrumbs')

From 38659b37f4b4cd969c1f773e5b7444e803d2fda1 Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Tue, 8 Dec 2020 09:50:05 -0500
Subject: [PATCH 05/10] return an empty breadcrumbs object on the landing page

---
 middleware/breadcrumbs.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/middleware/breadcrumbs.js b/middleware/breadcrumbs.js
index 52d1af2a497e..148ab2de5215 100644
--- a/middleware/breadcrumbs.js
+++ b/middleware/breadcrumbs.js
@@ -4,10 +4,12 @@ const { getPathWithoutLanguage } = require('../lib/path-utils')
 module.exports = async (req, res, next) => {
   if (!req.context.page) return next()
   if (req.context.page.hidden) return next()
-  if (req.context.page.relativePath === 'index.md') return next()
 
   req.context.breadcrumbs = {}
 
+  // Return an empty object on the landing page
+  if (req.context.page.relativePath === 'index.md') return next()
+
   const rawPath = getPathWithoutLanguage(req.path)
   const pathParts = rawPath.split('/')
 

From c55080e8669b89aef0c72597b71c971712f054e8 Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Tue, 8 Dec 2020 11:10:10 -0500
Subject: [PATCH 06/10] updates for refactored req.context.pages

---
 middleware/contextualizers/early-access-links.js | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/middleware/contextualizers/early-access-links.js b/middleware/contextualizers/early-access-links.js
index 4a63a3cd7a84..056efe45863f 100644
--- a/middleware/contextualizers/early-access-links.js
+++ b/middleware/contextualizers/early-access-links.js
@@ -1,10 +1,12 @@
+const { uniq } = require('lodash')
+
 module.exports = function earlyAccessContext (req, res, next) {
   if (process.env.NODE_ENV === 'production') {
     return next(404)
   }
 
   // Get a list of all hidden pages per version
-  const earlyAccessPageLinks = req.context.pages
+  const earlyAccessPageLinks = uniq(Object.values(req.context.pages)
     .filter(page => page.hidden)
     // Do not include early access landing page
     .filter(page => page.relativePath !== 'early-access/index.md')
@@ -12,7 +14,7 @@ module.exports = function earlyAccessContext (req, res, next) {
     .map(page => {
       return page.permalinks.map(permalink => `- [${permalink.title}](${permalink.href})`)
     })
-    .flat()
+    .flat())
     // Get links for the current version
     .filter(link => link.includes(req.context.currentVersion))
     .sort()

From 117bd5fcb8e362ce90e29bed007c7142f8165dbc Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Tue, 8 Dec 2020 11:36:53 -0500
Subject: [PATCH 07/10] add new conditional test runs helper

---
 tests/helpers/conditional-runs.js | 9 +++++++++
 tests/rendering/server.js         | 5 ++---
 tests/unit/early-access.js        | 5 +----
 3 files changed, 12 insertions(+), 7 deletions(-)
 create mode 100644 tests/helpers/conditional-runs.js

diff --git a/tests/helpers/conditional-runs.js b/tests/helpers/conditional-runs.js
new file mode 100644
index 000000000000..ebbc5e7657d5
--- /dev/null
+++ b/tests/helpers/conditional-runs.js
@@ -0,0 +1,9 @@
+const runningActionsOnInternalRepo = process.env.GITHUB_ACTIONS === 'true' && process.env.GITHUB_REPOSITORY === 'github/docs-internal' 
+
+const testViaActionsOnly = runningActionsOnInternalRepo ? test : test.skip 
+const describeViaActionsOnly = runningActionsOnInternalRepo ? describe : describe.skip
+
+module.exports = {
+  testViaActionsOnly,
+  describeViaActionsOnly
+}
\ No newline at end of file
diff --git a/tests/rendering/server.js b/tests/rendering/server.js
index 063b76c6347e..cb13cba6a597 100644
--- a/tests/rendering/server.js
+++ b/tests/rendering/server.js
@@ -1,12 +1,11 @@
 const lodash = require('lodash')
 const enterpriseServerReleases = require('../../lib/enterprise-server-releases')
 const { get, getDOM, head } = require('../helpers/supertest')
+const { describeViaActionsOnly } = require('../helpers/conditional-runs')
 const path = require('path')
 const nonEnterpriseDefaultVersion = require('../../lib/non-enterprise-default-version')
 const { loadPages } = require('../../lib/pages')
 
-const describeInternalOnly = process.env.GITHUB_REPOSITORY === 'github/docs-internal' ? describe : describe.skip
-
 describe('server', () => {
   jest.setTimeout(60 * 1000)
 
@@ -358,7 +357,7 @@ describe('server', () => {
     })
   })
 
-  describeInternalOnly('Early Access articles', () => {
+  describeViaActionsOnly('Early Access articles', () => {
     let hiddenPageHrefs, hiddenPages
 
     beforeAll(async (done) => {
diff --git a/tests/unit/early-access.js b/tests/unit/early-access.js
index f8ad0b3b88fd..82e2f4cbd4f9 100644
--- a/tests/unit/early-access.js
+++ b/tests/unit/early-access.js
@@ -1,9 +1,6 @@
 const fs = require('fs')
 const path = require('path')
-
-const { GITHUB_ACTIONS, GITHUB_REPOSITORY } = process.env
-const runningActionsOnInternalRepo = GITHUB_ACTIONS === 'true' && GITHUB_REPOSITORY === 'github/docs-internal'
-const testViaActionsOnly = runningActionsOnInternalRepo ? test : test.skip
+const { testViaActionsOnly } = require('../helpers/conditional-runs')
 
 describe('cloning early-access', () => {
   testViaActionsOnly('the content directory exists', async () => {

From a161a5923b154e0f52bac5bc068a0dd2777a909e Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Tue, 8 Dec 2020 11:40:52 -0500
Subject: [PATCH 08/10] lint

---
 tests/helpers/conditional-runs.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tests/helpers/conditional-runs.js b/tests/helpers/conditional-runs.js
index ebbc5e7657d5..974f1ea26e4a 100644
--- a/tests/helpers/conditional-runs.js
+++ b/tests/helpers/conditional-runs.js
@@ -1,9 +1,9 @@
-const runningActionsOnInternalRepo = process.env.GITHUB_ACTIONS === 'true' && process.env.GITHUB_REPOSITORY === 'github/docs-internal' 
+const runningActionsOnInternalRepo = process.env.GITHUB_ACTIONS === 'true' && process.env.GITHUB_REPOSITORY === 'github/docs-internal'
 
-const testViaActionsOnly = runningActionsOnInternalRepo ? test : test.skip 
+const testViaActionsOnly = runningActionsOnInternalRepo ? test : test.skip
 const describeViaActionsOnly = runningActionsOnInternalRepo ? describe : describe.skip
 
 module.exports = {
   testViaActionsOnly,
   describeViaActionsOnly
-}
\ No newline at end of file
+}

From 5a07447a14c1dece2f0292debfd1225b58ebdbe9 Mon Sep 17 00:00:00 2001
From: Sarah Schneider <sarahs@github.com>
Date: Tue, 8 Dec 2020 11:49:18 -0500
Subject: [PATCH 09/10] add comment clarifying purpose of separate middleware

---
 middleware/early-access-breadcrumbs.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/middleware/early-access-breadcrumbs.js b/middleware/early-access-breadcrumbs.js
index 5f31bee03bee..b0d2eb9087ea 100644
--- a/middleware/early-access-breadcrumbs.js
+++ b/middleware/early-access-breadcrumbs.js
@@ -1,6 +1,8 @@
 const path = require('path')
 const { getPathWithoutLanguage } = require('../lib/path-utils')
 
+// Early Access content doesn't conform to the same structure as other products, so we
+// can't derive breadcrumbs from the siteTree in the same way. Hence, this separate middleware.
 module.exports = async (req, res, next) => {
   if (!req.context.page) return next()
   if (!req.context.page.hidden) return next()

From 712dd751460511b9ae7d47fff5d6f79cadbd6aaa Mon Sep 17 00:00:00 2001
From: Chiedo John <2156688+chiedo@users.noreply.github.com>
Date: Wed, 9 Dec 2020 21:52:30 -0500
Subject: [PATCH 10/10] Confirm w/ internal GitHub team members when they post
 to docs (#16804)

Confirm w/ internal GitHub team members when they post to docs

Co-authored-by: Chiedo <chiedo@users.noreply.github.com>
Co-authored-by: Janice <janiceilene@github.com>
Co-authored-by: James M. Greene <JamesMGreene@github.com>
Co-authored-by: Jason Etcovitch <jasonetco@github.com>
---
 .../confirm-internal-staff-work-in-docs.yml   | 72 +++++++++++++++++++
 1 file changed, 72 insertions(+)
 create mode 100644 .github/workflows/confirm-internal-staff-work-in-docs.yml

diff --git a/.github/workflows/confirm-internal-staff-work-in-docs.yml b/.github/workflows/confirm-internal-staff-work-in-docs.yml
new file mode 100644
index 000000000000..fc1d3ea02424
--- /dev/null
+++ b/.github/workflows/confirm-internal-staff-work-in-docs.yml
@@ -0,0 +1,72 @@
+name: Confirm internal staff meant to post in public
+
+on:
+  issues:
+    types:
+      - opened
+      - reopened
+      - transferred
+  pull_request_target:
+    types:
+      - opened
+      - reopened
+
+jobs:
+  check-team-membership:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    if: github.repository == 'github/docs'
+    steps:
+      - uses: actions/github-script@626af12fe9a53dc2972b48385e7fe7dec79145c9
+        with:
+          github-token: ${{ secrets.DOCUBOT_FR_PROJECT_BOARD_WORKFLOWS_REPO_ORG_READ_SCOPES }}
+          script: |
+            // Only perform this action with GitHub employees
+            try {
+              await github.teams.getMembershipForUserInOrg({
+                org: 'github',
+                team_slug: 'employees',
+                username: context.payload.sender.login,
+              });
+            } catch(err) {
+              // An error will be thrown if the user is not a GitHub employee
+              // If a user is not a GitHub employee, we should stop here and
+              // Not send a notification
+              return
+            }
+
+            // Don't perform this action with Docs team members
+            try {
+              await github.teams.getMembershipForUserInOrg({
+                org: 'github',
+                team_slug: 'docs',
+                username: context.payload.sender.login,
+              });
+              // If the user is a Docs team member, we should stop here and not send
+              // a notification
+              return
+            } catch(err) {
+              // An error will be thrown if the user is not a Docs team member
+              // If a user is not a Docs team member we should continue and send
+              // the notification
+            }
+
+            const issueNo = context.number || context.issue.number
+
+            // Create an issue in our private repo
+            await github.issues.create({
+              owner: 'github',
+              repo: 'docs-internal',
+              title: `@${context.payload.sender.login} confirm that \#${issueNo} should be in the public github/docs repo`,
+              body: `@${context.payload.sender.login} opened https://github.com/github/docs/issues/${issueNo} publicly in the github/docs repo, instead of the private github/docs-internal repo.\n\n@${context.payload.sender.login}, please confirm that this belongs in the public repo and that no sensitive information was disclosed by commenting below and closing the issue.\n\nIf this was not intentional and sensitive information was shared, please delete https://github.com/github/docs/issues/${issueNo} and notify us in the \#docs-open-source channel.\n\nThanks! \n\n/cc @github/docs @github/docs-engineering`
+            });
+
+            throw new Error('A Hubber opened an issue on the public github/docs repo');
+
+      - name: Send Slack notification if a GitHub employee who isn't on the docs team opens an issue in public
+        if: ${{ failure() && github.repository == 'github/docs' }}
+        uses: someimportantcompany/github-actions-slack-message@0b470c14b39da4260ed9e3f9a4f1298a74ccdefd
+        with:
+          channel: ${{ secrets.DOCS_OPEN_SOURCE_SLACK_CHANNEL_ID }}
+          bot-token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }}
+          text: <@${{github.actor}}> opened https://github.com/github/docs/issues/${{ github.event.number || github.event.issue.number }} publicly on the github/docs repo instead of the private github/docs-internal repo. They have been notified via a new issue in the github/docs-internal repo to confirm this was intentional.