GHA workflow to trigger Danger Buildkite job

.buildkite/pipeline.yml

@@ -22,6 +22,7 @@ steps:
   - wait
 
   - label: "☢️ Danger - PR Check"
+    key: "danger"
     command: .buildkite/commands/danger-pr-check.sh
     plugins:
       - docker#v5.8.0:
@@ -30,6 +31,8 @@ steps:
           environment:
             - "DANGER_GITHUB_API_TOKEN"
     if: "build.pull_request.id != null"
+    agents:
+      queue: "default"
     retry:
       manual:
         permit_on_passed: true

.github/workflows/dangermattic.yml

@@ -0,0 +1,98 @@
+name: Danger on GitHub PR events
+
+on:
+  pull_request:
+    types: [review_requested, review_request_removed, labeled, unlabeled, milestoned, demilestoned]
+
+jobs:
+  dangermattic:
+    runs-on: ubuntu-latest
+    if: github.event.number > 0
+    steps:
+      - name: "☢️ Danger: Trigger on CI"
+        run: |
+          ORG_SLUG="automattic"
+          PIPELINE_SLUG="woocommerce-android"
+          RETRY_STEP_KEY="danger"
+          BUILDKITE_API_ACCESS_TOKEN="${{ secrets.TRIGGER_BK_BUILD_TOKEN }}"
+          LATEST_COMMIT_SHA="${{ github.event.pull_request.head.sha || github.sha }}"
+
+          # Performs a Buildkite request using a http method ($1) and an api path ($2)
+          perform_buildkite_request() {
+            local METHOD=$1
+            local BUILDKITE_API_PATH=$2
+
+            local BUILDKITE_API_URL="https://api.buildkite.com/v2/organizations/$ORG_SLUG/pipelines/$PIPELINE_SLUG/$BUILDKITE_API_PATH"
+
+            local RAW_RESPONSE=$(
+              curl \
+                --fail-with-body \
+                --silent \
+                --show-error \
+                -X "$METHOD" \
+                -H "Authorization: Bearer $BUILDKITE_API_ACCESS_TOKEN" \
+                "$BUILDKITE_API_URL"
+            )
+
+            echo "$RAW_RESPONSE" | tr -d '\n' | jq -R -r
+          }
+
+          # Gets the build(s) associated with the latest commit
+          get_buildkite_build() {
+            perform_buildkite_request "GET" "builds?commit=$LATEST_COMMIT_SHA"
+          }
+
+          # Given a build id ($1) and a job id ($2), retry the given job
+          retry_buildkite_job() {
+            local BUILD_ID=$1
+            local JOB_ID=$2
+
+            perform_buildkite_request "PUT" "builds/$BUILD_ID/jobs/$JOB_ID/retry"
+          }
+
+          # Validates a Buildkite response ($1)
+          check_buildkite_error() {
+            local RESPONSE=$1
+
+            # Check if the response is empty
+            if [ -z "$RESPONSE" ] || [ "$(echo "$RESPONSE" | jq 'length')" -eq 0 ]; then
+              echo "❌ Buildkite API call returned an empty response."
+              exit 1
+            fi
+
+            # Check if the response contains an error message
+            RESPONSE_ERROR=$(echo "$RESPONSE" | jq .message 2>/dev/null || true)
+            # if [[ -n "$RESPONSE_ERROR" ]]; then
+            if [[ -n "$RESPONSE_ERROR" && "$RESPONSE_ERROR" != 'null' ]]; then
+              echo "❌ Buildkite API call failed: $RESPONSE_ERROR"
+              exit 1
+            fi
+          }
+
+          BUILDKITE_GET_BUILD_RESPONSE=$(get_buildkite_build)
+          check_buildkite_error "$BUILDKITE_GET_BUILD_RESPONSE"
+
+          LATEST_BUILD=$(echo "$BUILDKITE_GET_BUILD_RESPONSE" | jq -r '.[0]')
+          LATEST_BUILD_NUMBER=$(echo "$LATEST_BUILD" | jq -r '.number')
+
+          DANGER_JOB=$(echo "$LATEST_BUILD" | jq -r --arg step_key "$RETRY_STEP_KEY" '.jobs[] | select(.step_key == $step_key)')
+          DANGER_JOB_ID=$(echo "$DANGER_JOB" | jq -r '.id')
+          DANGER_JOB_STATE=$(echo "$DANGER_JOB" | jq -r '.state')
+
+          echo "ℹ️ Build Number: $LATEST_BUILD_NUMBER"
+          echo "ℹ️ Job ID for step '$RETRY_STEP_KEY': $DANGER_JOB_ID"
+          echo "ℹ️ Job state for step '$RETRY_STEP_KEY': $DANGER_JOB_STATE"
+
+          # all states: running, scheduled, passed, failing, failed, blocked, canceled, canceling, skipped, not_run, finished
+          allowed_job_states=("passed" "failed" "canceled" "finished")
+          if [[ " ${allowed_job_states[@]} " =~ " $DANGER_JOB_STATE " ]]; then
+            BUILDKITE_RETRY_JOB_RESPONSE=$(retry_buildkite_job "$LATEST_BUILD_NUMBER" "$DANGER_JOB_ID")
+            check_buildkite_error "$BUILDKITE_RETRY_JOB_RESPONSE"
+
+            JOB_WEB_URL=$(echo "$BUILDKITE_RETRY_JOB_RESPONSE" | jq -r '.web_url')
+            echo "✅ Job succesfully retried: $JOB_WEB_URL"
+          elif [[ "$DANGER_JOB_STATE" == "running" || "$DANGER_JOB_STATE" == "scheduled" ]]; then
+            echo "⚠️ Job is already in state '$DANGER_JOB_STATE', no need to retry."
+          else
+            echo "❌ Cannot retry job in state '$DANGER_JOB_STATE'"
+          fi