From: Tomas Mraz <tomas@openssl.org>
Date: Wed, 12 May 2021 07:04:59 +0000 (+0200)
Subject: Remove the severity: fips change label if fips checksum unchanged
X-Git-Tag: openssl-3.0.0-alpha17~141
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=16e00da2c9a59e2e3ea774e546bdbe75b238595f;p=thirdparty%2Fopenssl.git

Remove the severity: fips change label if fips checksum unchanged

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15229)
---

diff --git a/.github/workflows/checksums.yml b/.github/workflows/checksums.yml
index ccbae1e553a..9caf49c9fb2 100644
--- a/.github/workflows/checksums.yml
+++ b/.github/workflows/checksums.yml
@@ -41,7 +41,7 @@ jobs:
         run: make update-fips-checksums
         working-directory: ./build-pristine
       - name: make diff-fips-checksums
-        run: make diff-fips-checksums || echo "fips_changed=1" >> $GITHUB_ENV
+        run: make diff-fips-checksums && echo "fips_unchanged=1" >> $GITHUB_ENV || echo "fips_changed=1" >> $GITHUB_ENV
         working-directory: ./build
       - name: set label
         if: ${{ env.fips_changed }}
@@ -55,3 +55,15 @@ jobs:
               repo: context.repo.repo,
               labels: ['severity: fips change']
             })
+      - name: remove label
+        if: ${{ env.fips_unchanged }}
+        uses: actions/github-script@v4
+        with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
+          script: |
+            github.issues.removeLabel({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              name: 'severity: fips change'
+            })