mitchellh/vouch
Vouch
Vouch is a GitHub Actions automation that enforces community trust by requiring new contributors to be vouched by existing members before they can interact with a project's issues and pull requests. It maintains a vouched user list in a tracked file, and automatically closes or locks interactions from unvouched or denounced users to reduce spam and abuse.
The system lets collaborators manage trust through issue and discussion comments using specific keywords to vouch, denounce, or unvouch users, with automatic updates to the vouched list and optional pull request merges. It also provides a CLI tool for checking and managing vouch status directly within CI workflows, and can sync CODEOWNERS into the vouch list so maintainers are automatically trusted.
Vouch supports cross-repository configuration lookup, delegates vouching authority to project admins and collaborators with write access, and creates a private GitHub App identity to bypass branch protection for automated commits and pull request merges. The project includes a Nix shell development environment for local testing and development.
Features
- Contribution Vetting Systems - Requires new contributors to be vouched by existing members before they can interact with issues and pull requests.
- GitHub Actions - Enforces community trust by requiring vouching for new contributors and auto-closing blocked interactions.
- Author Trust Issue Blockers - Automatically closes and locks issues from unvouched or denounced users to reduce spam and abuse.
- Unvouched User Interaction Closers - Automatically closes and locks issues or pull requests opened by unvouched or denounced users.
- Automated Trust Management Systems - Uses issue and discussion comments to vouch, denounce, or unvouch users with automatic file updates and PR merges.
- Issue and Discussion Comment Triggers - Uses issue and discussion comments with specific keywords to trigger vouch, denounce, and unvouch actions.
- Trust Management Commands - Lets collaborators vouch for or denounce users by posting specific keywords in issue or discussion comments.
- Vouch Management Commands - Ships a system for collaborators to vouch, denounce, or unvouch users by posting keyword commands in issue comments.
- Vouch-Based Access Controls - Requires existing members to vouch for new contributors before they can interact with project resources.
- GitHub Workflow Integrations - Runs vouch commands and checks user status directly within GitHub Actions workflows for automated moderation.
- Issue Moderation Utilities - Automatically closes and locks issues from unvouched or denounced users to reduce spam and abuse.
- Vouched User Registries - Maintains a vouched user list via issue comments, CLI commands, and automated syncs with CODEOWNERS.
- Vouch-Based Access Controls - Requires new users to be vouched by existing members before they can interact with project resources.
- User Block Lists - Prevents any user listed as denounced from having their pull requests accepted or merged.
- Vouch & Denounce Management - Clears a previous endorsement for a user by commenting a keyword on an issue, which updates a tracked file.
- Author Trust Gates - Blocks unvouched users from opening issues or pull requests, with automatic closure and locking.
- Vouch Status Queries - Executes vouch commands like checking a user's status directly within a CI workflow step.
- GitHub Repository Moderation - Restricts repository access to vouched users, automatically closing interactions from unvouched or denounced contributors.
- Author Trust Checks - Checks whether a pull request author is vouched, denounced, or automatically allowed, and optionally closes the PR.
- Author Trust PR Blockers - Automatically closes pull requests from unvouched or denounced users to maintain community standards.
- Author Vouch Checks - Blocks or closes pull requests from unvouched or denounced authors to maintain code quality and community standards.
- Author Vouch-Based Auto-Closures - Closes pull requests automatically when the author is unvouched or denounced, saving manual triage effort.
- Vouch List Pull Requests - Creates a branch and pull request with VOUCHED file updates instead of committing directly to the default branch.
- User Denouncements - Records a negative endorsement for a user by commenting a keyword on an issue, which updates a tracked file.
- CLI Vouch List Management - Adds, removes, or denounces users in the vouch list using local command-line commands.
- Cross-Repository Manager Lookups - Reads a separate repository's configuration to determine which users are authorized to manage vouching.
- Automated Bypass Identities - Creates a private GitHub App identity to bypass branch protection for automated commits and pull request merges.
- Trust Revocation Systems - Allows authorized members to revoke a user's vouched status when they violate community norms.
- Vouch Authority Delegations - Restricts the ability to vouch or denounce users to project admins and collaborators with write access.
- Code Owner Trust Syncs - Automatically adds users listed in CODEOWNERS to the vouch list so maintainers are trusted by default.
- Shell Scripts - Manages community trust and participation.
