feat(ncu-ci): parse comments to find a safe commit

Author: aduh95

lib/ci/run_ci.js

@@ -16,6 +16,26 @@ export const CI_PR_URL = `https://${CI_DOMAIN}/job/${CI_PR_NAME}/build`;
 const CI_V8_NAME = CI_TYPES.get(CI_TYPES_KEYS.V8).jobName;
 export const CI_V8_URL = `https://${CI_DOMAIN}/job/${CI_V8_NAME}/build`;
 
+const REQUEST_CI_COMMENT = /^@nodejs-github-bot .+([0-9a-f]{40})$/;
+
+async function findSafeFullCommitSHA(cli, prData, request) {
+  // First, let's check if the head was approved.
+  await Promise.all([prData.getReviews(), prData.getCommits()]);
+
+  const approvedHead = new PRChecker(cli, prData, request, {}).getApprovedTipOfHead();
+  if (approvedHead) return approvedHead;
+
+  // Else, let's find out if a collaborator added a comment with a full commit SHA.
+  await Promise.all([prData.getCollaborators(), prData.getComments()]);
+  const collaborators = Array.from(prData.collaborators.values(),
+    (c) => c.login.toLowerCase());
+  return prData.comments
+    .findLast(c =>
+      collaborators.includes(c.author.login.toLowerCase()) &&
+      REQUEST_CI_COMMENT.test(c.body))
+    ?.body.match(REQUEST_CI_COMMENT)[1];
+}
+
 export class RunPRJob {
   constructor(cli, request, owner, repo, prid, certifySafe) {
     this.cli = cli;
@@ -26,9 +46,7 @@ export class RunPRJob {
     this.prData = new PRData({ prid, owner, repo }, cli, request);
     this.certifySafe =
       certifySafe ||
-      Promise.all([this.prData.getReviews(), this.prData.getCommits()]).then(() =>
-        (this.certifySafe = new PRChecker(cli, this.prData, request, {}).getApprovedTipOfHead())
-      );
+      findSafeFullCommitSHA(cli, this.prData, request).then((h) => (this.certifySafe = h));
   }
 
   async getCrumb() {
@@ -72,6 +90,8 @@ export class RunPRJob {
     const { cli, certifySafe } = this;
 
     if (!(await certifySafe)) {
+      cli.info('If the tip of this PR looks safe, add a comment in the form of:');
+      cli.info('@nodejs-github-bot test <commit-full-sha-or-URL>');
       cli.error('Refusing to run CI on potentially unsafe PR');
       return false;
     }

lib/queries/PRComments.gql

@@ -9,6 +9,7 @@ query Comments($prid: Int!, $owner: String!, $repo: String!, $after: String) {
         }
         nodes {
           publishedAt
+          body
           bodyText
           author {
             login