Add Releases Git branches protection from push

github/lock-releases-branches.sh

@@ -0,0 +1,40 @@
+#!/bin/bash -eu
+
+[ ${OPERATION} = "LOCK" ] && review_count=6 || review_count=1
+[[ "${TASK_ID}" =~ ^[0-9]+$ ]] || exit 1
+
+echo "Operation \"${OPERATION}\" will be performed..."
+
+#echo "Getting Meeds-io repositories..."
+#items=$(curl -f -XGET -L "https://api.github.com/orgs/meeds-io/repos" \
+#   --header 'Accept: application/vnd.github.v3+json' \
+#  --header "Authorization: Bearer ${GIT_TOKEN}" | jq -r '.[] | @base64')
+
+echo "Parsing releases branch from catalog..."
+items=$(curl -H "Authorization: token ${GIT_TOKEN}" \
+  -H 'Accept: application/vnd.github.v3.raw' \
+  -L "https://api.github.com/repos/exoplatform/swf-release-manager-catalog/contents/exo-platform/${TASK_ID}.json" | jq -r '.[] | @base64')
+
+echo "Done. Performing action..."
+for row in ${items}; do
+  _jq() {
+    echo ${row} | base64 --decode | jq -r ${1}
+  }
+  item="$(_jq '.name')/branches/$(_jq '.release.branch')"
+  org="$(_jq '.git_organization')"
+  [ $org = "juzu" ] && continue
+  echo "$org/$item" | sed 's|/branches/|:|g'
+  if [ ${OPERATION} = "UNLOCK" ] && [[ "$(_jq '.release.branch')" =~ ^stable/[0-9]+(.[0-9]+)?.x$ ]]; then
+    set +e
+    curl -f -XDELETE -L "https://api.github.com/repos/$org/$item/protection" \
+      --header 'Accept: application/vnd.github.luke-cage-preview+json' \
+      --header "Authorization: Bearer ${GIT_TOKEN}"
+    set -e
+  else
+    curl -f -XPATCH -L "https://api.github.com/repos/$org/$item/protection/required_pull_request_reviews" \
+      --header 'Accept: application/vnd.github.luke-cage-preview+json' \
+      --header "Authorization: Bearer ${GIT_TOKEN}" \
+      --header 'Content-Type: application/json' \
+      -d "{\"required_approving_review_count\": ${review_count}}"
+  fi
+done