Comment with Perf diff on pull requests #19

	# NOTE: This has read-write repo token and access to secrets, so this must
	# not run any untrusted code.
	# see: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
	name: Comment with Perf diff on pull requests

	on:
	workflow_run:
	workflows: ["Perf CI"]
	types:
	- completed

	jobs:
	upload:
	runs-on: ubuntu-latest
	if: github.event.workflow_run.event == 'pull_request'
	steps:
	- name: 'Download artifact'
	uses: actions/github-script@v7.0.1
	with:
	script: \|
	var artifacts = await github.rest.actions.listWorkflowRunArtifacts({
	owner: context.repo.owner,
	repo: context.repo.repo,
	run_id: ${{github.event.workflow_run.id }},
	});
	var matchArtifact = artifacts.data.artifacts.filter((artifact) => {
	return artifact.name == "pr-perf"
	})[0];
	var download = await github.rest.actions.downloadArtifact({
	owner: context.repo.owner,
	repo: context.repo.repo,
	artifact_id: matchArtifact.id,
	archive_format: 'zip',
	});
	var fs = require('fs');
	fs.writeFileSync('${{github.workspace}}/pr.zip', Buffer.from(download.data));

	- name: 'Unpack artifact'
	run: unzip pr.zip

	- name: 'Comment on PR'
	uses: actions/github-script@v7.0.1
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	script: \|
	var fs = require('fs');
	var issue_number = Number(fs.readFileSync('./NR'));
	var comment_body = fs.readFileSync('./COMMENT');
	await github.rest.issues.createComment({
	owner: context.repo.owner,
	repo: context.repo.repo,
	issue_number: issue_number,
	body: comment_body.toString('utf8')
	});

Provide feedback