Flag Code That's Merged Without Review

[BenLloydPearson]

Flag Code That's Merged Without Review

flag_merged_no_review

Automatically notify your team when code is merged without review and provide additional context to the PR author and reviewers via labels and comments.

Conditions (All Must be True):

• A PR is merged without at least one human review.

Automation Actions:

• Send a Slack notification to alert your team.
• Apply a red DCF5-merge-without-approve label.
• Post a comment explaining the automation.

Start with this and add Slack notification capabilities:

# -*- mode: yaml -*-

manifest:
  version: 1.0

automations:
  DCF5-pr-reviewed:
    on:
      - merge
    if:
      - {{ pr.approvals | length == 0 }}
    run:
      - action: add-label@v1
        args:
          label: "DCF5-merge-without-approve"
          color: {{ colors.red }}
      - action: add-comment@v1
        args:
          comment: |
            SOC2 requires code review process on every code change.
            This PR was merged without any review process. 
            _SOC2 ref: CC8.1_

            @my-org/app-sec
colors:
  red: 'F6443B'