Warn if security fixes are not marked for testing

(cherry picked from commit 5e02a007ca016128eabdafdb7b8607ad518694c1)

diff --git a/dangerfile.py b/dangerfile.py
index 3adb813c684481150fa76dc44ebf10f4681b79ce..8c0bc9f9e1f649a5ff45d4ab529d432bce1db8a5 100644 (file)
--- a/dangerfile.py
+++ b/dangerfile.py
@@ -452,6 +452,25 @@ if switches_added:
             "job to exercise the new `./configure` switches."
         )
 
+###############################################################################
+# PRE-RELEASE TESTING
+###############################################################################
+#
+# WARN if the merge request is marked with the "Security" label, but not with
+# the label used for marking merge requests for pre-release testing (if the
+# latter is defined by the relevant environment variable).
+
+pre_release_testing_label = os.getenv("PRE_RELEASE_TESTING_LABEL")
+if (
+    pre_release_testing_label
+    and "Security" in mr_labels
+    and pre_release_testing_label not in mr_labels
+):
+    warn(
+        "This merge request is marked with the *Security* label, but it is not "
+        f"marked for pre-release testing (*{pre_release_testing_label}*)."
+    )
+
 ###############################################################################
 # USER-VISIBLE LOG LEVELS
 ###############################################################################