feat: Cleanup old GH env via Actions

[ericboehs]

department-of-veterans-affairs/va.gov-team#100722

This workflow deletes old, non-protected environments from the Vets API repo on GitHub. It also deletes environments attached to PRs on PR close/merge.

I initially wrote this to use bash but decided to convert to ruby for readability. Speaking of, GitHub doesn't syntax highlight bash (or ruby) embedded in YAML, so here's the ruby script:

require 'bundler/inline'
gemfile { source 'https://rubygems.org'; gem 'octokit' }

CURRENT_TIME = Time.now.to_i
THRESHOLD_SECONDS = 90 * 24 * 60 * 60 # 90 days in seconds
REPO = ENV['GITHUB_REPOSITORY']
CLIENT = Octokit::Client.new access_token: ENV['VA_VSP_BOT_GITHUB_TOKEN']

def old_and_unprotected? env
  env[:protection_rules].empty? && CURRENT_TIME - env[:created_at].to_i > THRESHOLD_SECONDS
end

def delete_environment env
  puts "\nDeleting: #{env[:name]}"
  CLIENT.delete_environment REPO, URI.encode_www_form_component(env[:name])
end

print 'Fetching and deleting old environments'
100.times do |page|
  envs = CLIENT.environments(REPO, per_page: 100, page: page + 1)&.dig(:environments) || []
  print '.'
  break if envs.empty?
  exit 2 if CLIENT.rate_limit.remaining < 1000

  envs
    .select { |env| old_and_unprotected? env }
    .each { |env| delete_environment env }
end

puts "\nDone."

I extracted the methods for readability.

[ericboehs]

Typically we'll only have 1 page worth of environments open so I probably don't need to loop but if this ever needs to run on thousands of envs again, this should run through them in 1-2 runs (rate limiting aside).