Any PR with "dangerous" edits should be considered dangerous

Fixes mdn#2985
peterbe · Mar 16, 2021 · 82a664c · 82a664c
1 parent 1d33486
commit 82a664c
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/.github/workflows/dangerous-contributions.yml b/.github/workflows/dangerous-contributions.yml
@@ -0,0 +1,22 @@
+name: Dangerous file changes
+
+on:
+  pull_request_target:
+    paths:
+      - '.github/workflows/**'
+      - '.github/CODEOWNERS'
+      - '.github/dependabot.yml'
+      - package.json
+      - yarn.lock
+
+jobs:
+  triage:
+    # This make sure it only runs on our origin repo
+    if: github.repository == 'mdn/content' && github.event.pull_request.user.login != 'dependabot'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Stop anything and everything
+        run: |
+          echo "Any PR that edits these files should break the build and expect admin overrides"
+          echo ${{ github.event.pull_request }}
+          exit 1