abcxyz / abcxyz/access-on-demand

Actions to author PRs for common usecases.

Open
#167 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
3
Forks
1
PR merge metrics
No merged PRs in 30d

Description

### TL;DR

The ergonomics of creating a PR with a properly formatted `iam.yaml` aren't great.

For common usecases, it would be nice to have a templated GH action that would author a PR for you (fill in project, resource, role, principal).

### Detailed design

```markdown
The main issue would be ensuring 2 party review was still enforced. GHTM can be used with GitHub script to author PRs (I believe we do this in abc-updater), but since the author is GHTM, someone could run the action and approve it themselves.

One solution would be to use the workflow we have been working on that enforces two users approving, and have people approve their as well as the actual reviewer.

There may be a more elegant solution, depending on if we can get information about who actuated the action when authoring the PR.
```

### Alternatives considered

```markdown

```

### Additional information

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.