VAULT-17736 Add HashiCorp contributed label to HC contributed PRs (#21629)

* VAULT-17736 Add HashiCorp contributed label to HC contributed PRs

* VAULT-17736 finish my thought

* VAULT-17736 gh pr edit

* VAULT-17736 update formatting

* VAULT-17736 quote for linting happiness

* VAULT-17736 try without apostrophes?

* VAULT-17736 try with quotes?

* VAULT-17736 try one line run

* VAULT-17736 Oh, that was it

* VAULT-17736 No more ready_for_review

.github/workflows/add-hashicorp-contributed-label.yml

@@ -0,0 +1,28 @@
+name: Add HashiCorp contributed label
+
+# The purpose of this job is to label all HashiCorp contributed PRs, so that
+# we can more easily identify community contributed PRs (anything that doesn't
+# have this label).
+# While it might seem like this is the 'reverse' of what we should do, GitHub
+# (rightly) does not allow branches from forks to have write permissions, so
+# making PRs from forks self-label themselves as community-contributed is not
+# possible.
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    # Runs on PRs to main
+    branches:
+      - main
+
+jobs:
+  add-hashicorp-contributed-label:
+    # Only run if this is NOT coming from a fork of Vault (if this is not true, it's community contributed)
+    if: ${{ github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Add label to PR"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR: ${{ github.event.pull_request.html_url }}
+        run: gh pr edit "$PR" --add-label 'hashicorp-contributed-pr'