From eb561b16cd6876ad46673da3dc2129723d61b4be Mon Sep 17 00:00:00 2001 From: bunnam988 Date: Fri, 3 Jul 2026 14:50:58 +0530 Subject: [PATCH 1/7] Add gatekeeper and cherry-pick workflows for testing --- .github/workflows/auto-backport.yml | 14 ++++++++++++++ .github/workflows/gatekeeper.yml | 15 +++++++++++++++ 2 files changed, 29 insertions(+) create mode 100644 .github/workflows/auto-backport.yml create mode 100644 .github/workflows/gatekeeper.yml diff --git a/.github/workflows/auto-backport.yml b/.github/workflows/auto-backport.yml new file mode 100644 index 0000000..6fa0e04 --- /dev/null +++ b/.github/workflows/auto-backport.yml @@ -0,0 +1,14 @@ +name: Automated Cherry-Pick Engine + +on: + pull_request: + types: [labeled, closed] + +jobs: + cherry-pick: + if: github.event.pull_request.merged == true && contains(toJSON(github.event.pull_request.labels.*.name), 'cherry-pick to ') + uses: bunnam988/build_tools_workflows/.github/workflows/cherry-pick.yml@develop + with: + raw_labels: ${{ toJSON(github.event.pull_request.labels) }} + secrets: + CROSS_REPO_TOKEN: ${{ secrets.CROSS_REPO_TOKEN }} diff --git a/.github/workflows/gatekeeper.yml b/.github/workflows/gatekeeper.yml new file mode 100644 index 0000000..d277ba3 --- /dev/null +++ b/.github/workflows/gatekeeper.yml @@ -0,0 +1,15 @@ +name: Topic Gatekeeper + +on: + pull_request: + types: [opened, synchronize, reopened] + branches: + - develop + - 'release/**' + - 'support/**' + pull_request_review: + types: [submitted] + +jobs: + run-shared-gatekeeper: + uses: bunnam988/build_tools_workflows/.github/workflows/gatekeeper.yml@develop From 72aaac9b4cc3fd12797d0bafcdb10c95b440ebd8 Mon Sep 17 00:00:00 2001 From: bunnam988 Date: Fri, 3 Jul 2026 14:52:52 +0530 Subject: [PATCH 2/7] [RDKB-99999] AdvSec component change --- test_gatekeeper.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 test_gatekeeper.txt diff --git a/test_gatekeeper.txt b/test_gatekeeper.txt new file mode 100644 index 0000000..0219090 --- /dev/null +++ b/test_gatekeeper.txt @@ -0,0 +1 @@ +# AdvSec gatekeeper test From 381f0f6a67d026945cd258cc56d56b650150b038 Mon Sep 17 00:00:00 2001 From: bunnam988 Date: Fri, 3 Jul 2026 16:00:38 +0530 Subject: [PATCH 3/7] Add write permissions to cherry-pick caller --- .github/workflows/auto-backport.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/auto-backport.yml b/.github/workflows/auto-backport.yml index 6fa0e04..892bbad 100644 --- a/.github/workflows/auto-backport.yml +++ b/.github/workflows/auto-backport.yml @@ -4,6 +4,10 @@ on: pull_request: types: [labeled, closed] +permissions: + contents: write + pull-requests: write + jobs: cherry-pick: if: github.event.pull_request.merged == true && contains(toJSON(github.event.pull_request.labels.*.name), 'cherry-pick to ') From 20e36c64d649cef2af504960ca4ace4eef967aee Mon Sep 17 00:00:00 2001 From: bunnam988 Date: Fri, 3 Jul 2026 16:03:19 +0530 Subject: [PATCH 4/7] Remove unnecessary permissions block --- .github/workflows/auto-backport.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/auto-backport.yml b/.github/workflows/auto-backport.yml index 892bbad..6fa0e04 100644 --- a/.github/workflows/auto-backport.yml +++ b/.github/workflows/auto-backport.yml @@ -4,10 +4,6 @@ on: pull_request: types: [labeled, closed] -permissions: - contents: write - pull-requests: write - jobs: cherry-pick: if: github.event.pull_request.merged == true && contains(toJSON(github.event.pull_request.labels.*.name), 'cherry-pick to ') From c63701b7ddfe1fa88ef896bcae7d995fa0259cb4 Mon Sep 17 00:00:00 2001 From: bunnam988 Date: Fri, 3 Jul 2026 17:06:14 +0530 Subject: [PATCH 5/7] Pass trigger_label to cherry-pick workflow --- .github/workflows/auto-backport.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/auto-backport.yml b/.github/workflows/auto-backport.yml index 6fa0e04..98d1656 100644 --- a/.github/workflows/auto-backport.yml +++ b/.github/workflows/auto-backport.yml @@ -10,5 +10,6 @@ jobs: uses: bunnam988/build_tools_workflows/.github/workflows/cherry-pick.yml@develop with: raw_labels: ${{ toJSON(github.event.pull_request.labels) }} + trigger_label: ${{ github.event.label.name || '' }} secrets: CROSS_REPO_TOKEN: ${{ secrets.CROSS_REPO_TOKEN }} From 15629acc9a2a55e74409e2bbcde006b3f5837e8c Mon Sep 17 00:00:00 2001 From: bunnam988 Date: Fri, 3 Jul 2026 17:08:47 +0530 Subject: [PATCH 6/7] Fix trigger_label expression --- .github/workflows/auto-backport.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/auto-backport.yml b/.github/workflows/auto-backport.yml index 98d1656..941c348 100644 --- a/.github/workflows/auto-backport.yml +++ b/.github/workflows/auto-backport.yml @@ -10,6 +10,6 @@ jobs: uses: bunnam988/build_tools_workflows/.github/workflows/cherry-pick.yml@develop with: raw_labels: ${{ toJSON(github.event.pull_request.labels) }} - trigger_label: ${{ github.event.label.name || '' }} + trigger_label: ${{ github.event.label.name }} secrets: CROSS_REPO_TOKEN: ${{ secrets.CROSS_REPO_TOKEN }} From e4fb41ca88cc91cbfa3acea6b5fb9635a53d1a1f Mon Sep 17 00:00:00 2001 From: bunnam988 <107185904+bunnam988@users.noreply.github.com> Date: Wed, 5 Aug 2026 16:41:17 +0530 Subject: [PATCH 7/7] Update TR181-AdvSecurity.xml --- config/TR181-AdvSecurity.xml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/config/TR181-AdvSecurity.xml b/config/TR181-AdvSecurity.xml index 5c84a4c..abea399 100644 --- a/config/TR181-AdvSecurity.xml +++ b/config/TR181-AdvSecurity.xml @@ -1,6 +1,8 @@