Skip to content

Automatically credit remediation developers and reviewers - #61

Open
sethmlarson wants to merge 6 commits into
python:mainfrom
sethmlarson:auto-credit-reviewers
Open

Automatically credit remediation developers and reviewers#61
sethmlarson wants to merge 6 commits into
python:mainfrom
sethmlarson:auto-credit-reviewers

Conversation

@sethmlarson

Copy link
Copy Markdown
Collaborator

The bot can automatically credit people who participate in creating a patch or reviewing the patch privately. Does not override credits that already exist for an individual.

Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread src/psrt_ghsa_bot/app.py
Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread tests/test_app.py

@StanFromIreland StanFromIreland left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you also please update the flow chart in the README for this, TiA!

Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread src/psrt_ghsa_bot/app.py
Comment thread src/psrt_ghsa_bot/app.py
Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread src/psrt_ghsa_bot/app.py

@StanFromIreland StanFromIreland left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Last few nits, otherwise looks good. If you prefer we can leave updating the documentation (a.k.a. README) to a follow up, but it would be nice to get it done now.

Comment thread src/psrt_ghsa_bot/app.py Outdated
Comment thread src/psrt_ghsa_bot/app.py
Comment thread src/psrt_ghsa_bot/app.py

for review in reviews:
review_login = review["user"]["login"]
if review_login == pull_request_author:

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, this is a little bit of an edge case, but if someone opens a PR, and then reviews an alternative PR by a different author, the credit type is dependant on the order in which the PRs are processed. Do we care? Not really, it's hard to judge which one will be more correct, I think we can manually fix it up if this occurs.

Comment thread src/psrt_ghsa_bot/app.py
sethmlarson and others added 2 commits August 21, 2026 15:15
Co-authored-by: Stan Ulbrych <stan@python.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants