Warn if security fixes are not marked for testing

(cherry picked from commit 5e02a007ca016128eabdafdb7b8607ad518694c1)

diff --git a/dangerfile.py b/dangerfile.py
index 3a4ef3fb678b8c8188a5b5dd0b2be613b4f365f0..df6e5a72d103ed994b462a98b6e9414f3699b5cc 100644 (file)
--- a/dangerfile.py
+++ b/dangerfile.py
@@ -449,6 +449,25 @@ if switches_added:
             "job to exercise the new `./configure` switches."
         )
 
+###############################################################################
+# PRE-RELEASE TESTING
+###############################################################################
+#
+# WARN if the merge request is marked with the "Security" label, but not with
+# the label used for marking merge requests for pre-release testing (if the
+# latter is defined by the relevant environment variable).
+
+pre_release_testing_label = os.getenv("PRE_RELEASE_TESTING_LABEL")
+if (
+    pre_release_testing_label
+    and "Security" in mr_labels
+    and pre_release_testing_label not in mr_labels
+):
+    warn(
+        "This merge request is marked with the *Security* label, but it is not "
+        f"marked for pre-release testing (*{pre_release_testing_label}*)."
+    )
+
 ###############################################################################
 # USER-VISIBLE LOG LEVELS
 ###############################################################################