Building GitHub bots (and the bpmn.io pull request flow)

In this talk I introduce GitHub bots / apps, their application to support your workflow on GitHub and the purpose of merge-me, my very own bot.

Transcript

1. Building GitHub Bots / Apps ...and the bpmn.io pull request flow.
2. GitHub Bot / App An application that consumes events (emitted by GitHub) and drives workflow via GitHub REST or GraphQL API.
3. Examples Automate dependency update notifications Automate CI run scheduling Automate merged branch deletion Automate issue commenting / marking / closing Automate merging, once all required checks pass Rich user interaction via issues ...
4. Flow User GitHub GitHub Bot UI action / Git Push Event (s) API Call(s) UI update / notification Event(s) API Call(s) And so on... User GitHub GitHub Bot
5. Event Subscription via Web Hooks GitHub allows you to register web hooks, URLs that are being invoked once anything happens.
6. Driving GitHub via API REST API (so 2017) or GraphQL API.
7. Security Model Apps are authenticated by organization owners on a per-project level. Apps must declare consumed events and access to project and user resources on a fine grained level (i.e. read issues, write issue comments). Apps may impersonate users (to a certain extend) to perform actions on behalf of the user.
8. Probot: A Framework to Build Apps Node app framework Easy setup (app registration) Bundles REST + GraphQL clients Features example apps/bots Apps can be mixed and matched under new identity
9. Example 1: merge-me
10. Example 2: waffle.io
11. Deployment Any free / payed tier PaaS hosting service: Heroku Now ...
12. ?