Set the severity: fips change label if fips checksum changed

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15229)

diff --git a/.github/workflows/checksums.yml b/.github/workflows/checksums.yml
index d22e38a5e95c52af4b727ad11e3750b7a5b2f840..ccbae1e553ab129c31731242b8dadddb8200e2c0 100644 (file)
--- a/.github/workflows/checksums.yml
+++ b/.github/workflows/checksums.yml
@@ -41,16 +41,17 @@ jobs:
         run: make update-fips-checksums
         working-directory: ./build-pristine
       - name: make diff-fips-checksums
-        run: make diff-fips-checksums
+        run: make diff-fips-checksums || echo "fips_changed=1" >> $GITHUB_ENV
         working-directory: ./build
-
-#      - uses: actions/github-script@v4
-#        with:
-#          github-token: ${{secrets.GITHUB_TOKEN}}
-#          script: |
-#            github.issues.addLabels({
-#              issue_number: context.issue.number,
-#              owner: context.repo.owner,
-#              repo: context.repo.repo,
-#              labels: ['Triage']
-#            })
+      - name: set label
+        if: ${{ env.fips_changed }}
+        uses: actions/github-script@v4
+        with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
+          script: |
+            github.issues.addLabels({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              labels: ['severity: fips change']
+            })