nissuer

Turn issues into non-issues quicker

A GitHub Action for tried and tired maintainers. This action is meant to help maintainers of open-source projects by automating some of the more tedious/repetitive tasks that come with the job.

Features

nissuer comes with a default configuration, but you can override certain behaviors. Below is a list of features and the corresponding inputs.

Handle unhelpful comments

nissuer can hide "+1", "same issue", etc. comments on issues (partially based on Refined GitHub). It won't hide comments from the repo organization members.
nissuer can also update the hidden comment with a note from the maintainers, explaining to the user why the comment was hidden. This is used for education purposes, so hopefully the user will be more considerate in the future.

Input	Description	Default Value
`comment-add-explainer`	Add an explainer to a comment that was marked as off-topic.	`true`
`comment-unhelpful-weight`	If an issue comment is below this rate, it will be marked as off-topic and hidden.	`0.3`

Validate reproduction URLs

nissuer can close/comment/label/lock issues that do not have a valid reproduction URL
nissuer validates the returned status code of a reproduction URL (for example a private GitHub repository will not be considered valid)

Input	Description	Default Value
`reproduction-comment`	Either a string or a path to a .md file inside the repository.	`.github/invalid-reproduction.md`
`reproduction-hosts`	Comma-separated list of hostnames allowed for reproductions.	`github.com`
`reproduction-blocklist`	Comma-separated list of regular expression string that are not allowed for reproductions. (Eg.: "github.com/.*/fork-of-non-reproduction"')
`reproduction-invalid-label`	Label to apply to issues without a valid reproduction.	`invalid-reproduction`
`reproduction-issue-labels`	Comma-separated list of issue labels. If configured, only verify reproduction URLs of issues with one of these labels present. A comma at the end will handle issues without any label as non-valid.
`reproduction-link-section`	A regular expression string with "(.*)" matching a valid URL in the issue body. The result is trimmed.	`### Link to reproduction(.*)### To reproduce`

Label Management

nissuer can label issues based on the content of an issue. Add a select input, and nissuer will add a label based on the selection.
nissuer can comment on issues based on labels on behalf of a maintainer. Avoid having to repeat yourself by writing up a comment for common cases

Input	Description	Default Value
`label-comments`	Autocomment on issues based on the added label. It should be a JSON object, where the key is a label, and the value is a file path or a comment text.	`{"invalid reproduction": ".github/invalid-reproduction.md"}`
`label-area-prefix`	Only look for these labels when autolabeling based on the user selection. (Can be set to an empty string `""` to match all labels.)	`area:`
`label-area-match`	Whether to look for the label names or description, when matching.	`description`
`label-area-section`	A regular expression string with "(.*)" matching a section in the issue body to look for user-selected areas. The result is trimmed. Labeling is skipped if this is not configured

Notify about public security disclosures

nissuer can detect if an issue about a potential vulnerability might have been opened publicly by accident and notify the maintainer about it.
nissuer can also delete the issue automatically and send you all the details via a webhook. This can help avoid staying up late at night to fix a vulnerability that was not disclosed responsibly.

Input	Description	Default Value
`webhook-url`	Webhook URL to send notifications to.
`webhook-secret`	Secret to use for the webhook. It will be part of the JSON body of the request as `secret`.
`delete-vulnerability-report`	Delete the vulnerability report after sending it to the webhook.	`false`

Usage

Here is a minimal setup of nissuer. Add a workflow (eg. .github/workflows/nissuer.yml):

name: Triage via nissuer

on:
  issues:
    types: [opened, labeled]
  issue_comment:
    types: [created]

permissions:
  issues: write

env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

jobs:
  issue-validator:
    runs-on: ubuntu-latest
    steps:
      - name: Nissuer
        uses: balazsorban44/nissuer@1.10.0

Add a comment file (by default we look for .github/invalid-reproduction.md):

NOTE: Developers are coming to your project with all sorts of backgrounds/skill levels or understanding of the open-source world. Show empathy while using this action. 💚 We recommend adding comments that not only dismiss unhelpful issues/comments, but educate the user on how to be more helpful in the future.

Thanks for opening an issue!

Unfortunately, we can't help you without a reproduction URL.

It was closed automatically, but feel free to reopen it once you have a reproduction URL.

A good example of a comment is in the Next.js repository.