automerge (#191)

.github/bulldozer.yml

@@ -0,0 +1,11 @@
+version: 1
+
+merge:
+  trigger:
+    labels: ["automerge"]
+  method: squash
+  options:
+    squash:
+      body: summarize_commits
+  delete_after_merge: true
+  allow_merge_with_no_checks: false

.github/dependabot.yml

@@ -14,6 +14,8 @@ updates:
       - dependencies
     reviewers:
       - BESTSELLER/engineering-services
+    labels:
+      - automerge
   - package-ecosystem: "docker" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
@@ -23,6 +25,8 @@ updates:
       - dependencies
     reviewers:
       - BESTSELLER/engineering-services
+    labels:
+      - automerge
   - package-ecosystem: "github-actions" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
@@ -32,3 +36,5 @@ updates:
       - dependencies
     reviewers:
       - BESTSELLER/engineering-services
+    labels:
+      - automerge

.github/policy.yml

@@ -0,0 +1,36 @@
+policy:
+  approval:
+    - or:
+      - and:
+          - tests passed
+          - es has approved
+      - and:
+          - dependabot is making the PR
+          - or:
+              - tests passed
+              - es has approved
+  disapproval:
+    requires:
+      organizations:
+        - "bestseller"
+approval_rules:
+  - name: tests passed
+    if:
+      has_successful_status:
+        - "test"
+        - "GitGuardian Security Checks"
+    requires:
+      count: 0
+  - name: es has approved
+    requires:
+      count: 1
+      teams:
+        - "BESTSELLER/engineering-services"
+  - name: dependabot is making the PR
+    if:
+      has_author_in:
+        users:
+          - "dependabot[bot]"
+          - "dependabot-circleci[bot]"
+    requires:
+      count: 0