Ability to randomly select developers for Bot PRs

[sdivelbiss]

We have a lot of outstanding automated bot PRs that none of the developers want to deal with. This would allow you to list various developers that would be randomly selected to be assigned to Bot (dependabot) PRs.

Added:
random: boolean - will be ignored if user type is not Bot
randomAssignees: string[] - list of user names for bot to choose from

[kentaro-m]

Hi, @sdivelbiss.

You can use pull_request_target event as trigger workflows to handle open pull requests from bots like Dependabot.

When using it, there are a few security aspects that you need to understand.

See below for details:
https://docs.github.com/en/actions/learn-github-actions/events-that-trigger-workflows#pull_request_target
https://docs.github.com/en/actions/learn-github-actions/events-that-trigger-workflows#pull-request-events-for-forked-repositories

name: 'Auto Assign'
on:
  pull_request_target: # Change here
    types: [opened, ready_for_review]

jobs:
  add-reviews:
    runs-on: ubuntu-latest
    steps:
      - uses: kentaro-m/[email protected]