[SL-ONLY] Simplify require admin workflow (#261)

Co-authored-by: Junior Martinez <[email protected]>

Author: mkardous-silabs

.github/workflows/silabs-require-admin-action-check.yaml

@@ -17,42 +17,83 @@ permissions:
 
 jobs:
     check-label:
+        name: Fail CI if sl-require-admin-action label is present
         runs-on: ubuntu-latest
+        if:
+            ${{ contains(github.event.pull_request.labels.*.name,
+            'sl-require-admin-action') }}
         steps:
-            - name: Check for sl-require-admin-action label
+            - name: Add comment to PR
+              uses: actions/github-script@v7
+              with:
+                  script: |
+                      const prNumber = context.payload.pull_request.number;
+                      const comment = "The check for `sl-require-admin-action` label CI failure for this job is normal. An admin must do the merge.";
+                      const { data: comments } = await github.rest.issues.listComments({
+                        owner: context.repo.owner,
+                        repo: context.repo.repo,
+                        issue_number: prNumber,
+                      });
+                      const existingComment = comments.find(c => c.body.includes(comment));
+                      if (!existingComment) {
+                        await github.rest.issues.createComment({
+                          owner: context.repo.owner,
+                          repo: context.repo.repo,
+                          issue_number: prNumber,
+                          body: comment,
+                        });
+                      }
+
+            - name: Trigger CI failure
               run: |
-                  PR_NUMBER=${{ github.event.pull_request.number }}
-                  LABELS=$(gh pr view $PR_NUMBER --repo ${{ github.repository }} --json labels --jq '.labels[].name')
-                  if echo "$LABELS" | grep -q "sl-require-admin-action"; then
-                    echo "The sl-require-admin-action label is present. Failing the job."
-                    COMMENTS=$(gh pr view $PR_NUMBER --repo ${{ github.repository }} --json comments --jq '.comments[].body')
-                    if ! echo "$COMMENTS" | grep -q "The CI failure for this job is normal. An admin must do the merge."; then
-                      gh pr comment $PR_NUMBER --repo ${{ github.repository }} --body "The CI failure for this job is normal. An admin must do the merge."
-                    fi
-                    exit 1
-                  else
-                    echo "The sl-require-admin-action label is not present. Passing the job."
-                  fi
+                  echo "The sl-require-admin-action label is present. Failing the job."
+                  process.exit(1);
               env:
                   GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
     prevent-label-removal:
+        name: Prevent sl-require-admin-action label from being removed
         runs-on: ubuntu-latest
+        if:
+            github.event.action == 'unlabeled' && github.event.label.name ==
+            'sl-require-admin-action'
         steps:
-            - name: Prevent sl-require-admin-action label removal
-              if: github.event.action == 'unlabeled'
+            - name: Add comment to PR
+              uses: actions/github-script@v7
+              with:
+                  script: |
+                      const prNumber = context.payload.pull_request.number;
+                      const comment = "The `sl-require-admin-action` label cannot be removed once it has been added.";
+                      const { data: comments } = await github.rest.issues.listComments({
+                        owner: context.repo.owner,
+                        repo: context.repo.repo,
+                        issue_number: prNumber,
+                      });
+                      const existingComment = comments.find(c => c.body.includes(comment));
+                      if (!existingComment) {
+                        await github.rest.issues.createComment({
+                          owner: context.repo.owner,
+                          repo: context.repo.repo,
+                          issue_number: prNumber,
+                          body: comment,
+                        });
+                      }
+
+            - name: Re-add sl-require-admin-action label
+              uses: actions/github-script@v7
+              with:
+                  script: |
+                      const prNumber = context.payload.pull_request.number;
+                      await github.rest.issues.addLabels({
+                        owner: context.repo.owner,
+                        repo: context.repo.repo,
+                        issue_number: prNumber,
+                        labels: ['sl-require-admin-action'],
+                      });
+
+            - name: Trigger CI failure
               run: |
-                  PR_NUMBER=${{ github.event.pull_request.number }}
-                  REMOVED_LABEL=${{ github.event.label.name }}
-                  if [ "$REMOVED_LABEL" == "sl-require-admin-action" ]; then
-                    echo "The sl-require-admin-action label cannot be removed. Failing the job."
-                    COMMENTS=$(gh pr view $PR_NUMBER --repo ${{ github.repository }} --json comments --jq '.comments[].body')
-                    if ! echo "$COMMENTS" | grep -q "The sl-require-admin-action label cannot be removed once it has been added."; then
-                      gh pr comment $PR_NUMBER --repo ${{ github.repository }} --body "The sl-require-admin-action label cannot be removed once it has been added."
-                    fi
-                    exit 1
-                  else
-                    echo "A different label was removed. Passing the job."
-                  fi
+                  echo "The sl-require-admin-action label cannot be removed. Failing the job."
+                  process.exit(1);
               env:
                   GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}