From 3385b5fcf5eae4fb933507871c39a62849557641 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Daniel=20Bl=C3=A4cker?= <d.blaecker@gmail.com>
Date: Tue, 13 Aug 2024 07:55:17 +0700
Subject: [PATCH] test

---
 .github/workflows/protectAuditorsGroup.yml    | 69 +++++++++++++++++++
 .../checkAudit.yml                            |  0
 2 files changed, 69 insertions(+)
 create mode 100644 .github/workflows/protectAuditorsGroup.yml
 rename .github/{workflows => workflows_DONE}/checkAudit.yml (100%)

diff --git a/.github/workflows/protectAuditorsGroup.yml b/.github/workflows/protectAuditorsGroup.yml
new file mode 100644
index 000000000..4551c05ad
--- /dev/null
+++ b/.github/workflows/protectAuditorsGroup.yml
@@ -0,0 +1,69 @@
+name: Protect Auditors Group
+
+on:
+  push:
+
+jobs:
+  check_membership:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Check Group Membership Overlap
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const ORG_NAME = 'lifinance';
+            const GROUP_A = 'smart-contract-core';
+            const GROUP_B = 'smart-contract-admins';
+            const GROUP_C = 'auditors';
+
+            async function getTeamMembers(org, teamSlug) {
+              const members = [];
+              let page = 1;
+
+              while (true) {
+                const { data } = await github.rest.teams.listMembersInOrg({
+                  org,
+                  team_slug: teamSlug,
+                  per_page: 100,
+                  page
+                });
+
+                members.push(...data.map(member => member.login));
+
+                if (data.length < 100) break;
+                page++;
+              }
+
+              return members;
+            }
+
+            async function run() {
+              const groupAMembers = await getTeamMembers(ORG_NAME, GROUP_A);
+              const groupBMembers = await getTeamMembers(ORG_NAME, GROUP_B);
+              const groupCMembers = await getTeamMembers(ORG_NAME, GROUP_C);
+
+
+              // check overlap between smart-contract-core and auditors
+              const overlap = groupAMembers.filter(member => groupCMembers.includes(member));
+
+              if (overlap.length > 0) {
+                core.setFailed(`ERROR: The following members are in both ${GROUP_A} and ${GROUP_C}: ${overlap.join(', ')}`);
+                } else {
+                  core.info(`No overlap found between ${GROUP_A} and ${GROUP_B}.`);
+                }
+
+              // check overlap between smart-contract-admins and auditors
+              const overlap = groupBMembers.filter(member => groupCMembers.includes(member));
+              if (overlap.length > 0) {
+                core.setFailed(`ERROR: The following members are in both ${GROUP_B} and ${GROUP_C}: ${overlap.join(', ')}`);
+              } else {
+                core.info(`No overlap found between ${GROUP_A} and ${GROUP_B}.`);
+              }
+            }
+
+            await run();
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/checkAudit.yml b/.github/workflows_DONE/checkAudit.yml
similarity index 100%
rename from .github/workflows/checkAudit.yml
rename to .github/workflows_DONE/checkAudit.yml