feat: add support for Copilot code review in organization ruleset

Author: Moser-ss

github/resource_github_organization_ruleset.go

@@ -300,6 +300,12 @@ func resourceGithubOrganizationRuleset() *schema.Resource {
 										Default:     false,
 										Description: "All conversations on code must be resolved before a pull request can be merged. Defaults to `false`.",
 									},
+									"automatic_copilot_code_review_enabled": {
+										Type:        schema.TypeBool,
+										Optional:    true,
+										Default:     false,
+										Description: "Automatically request Copilot code review. Defaults to `false`.",
+									},
 								},
 							},
 						},
@@ -646,6 +652,28 @@ func resourceGithubOrganizationRuleset() *schema.Resource {
 								},
 							},
 						},
+						"copilot_code_review": {
+							Type:        schema.TypeList,
+							MaxItems:    1,
+							Optional:    true,
+							Description: "Request Copilot code review for new pull requests automatically if the author has access to Copilot code review.",
+							Elem: &schema.Resource{
+								Schema: map[string]*schema.Schema{
+									"review_on_push": {
+										Type:        schema.TypeBool,
+										Optional:    true,
+										Default:     false,
+										Description: "Copilot automatically reviews each new push to the pull reques. Defaults to `false`.",
+									},
+									"review_draft_pull_requests": {
+										Type:        schema.TypeBool,
+										Optional:    true,
+										Default:     false,
+										Description: "Copilot automatically reviews draft pull requests before they are marked as ready for review. Defaults to `false`.",
+									},
+								},
+							},
+						},
 					},
 				},
 			},

github/resource_github_organization_ruleset_test.go

@@ -86,6 +86,11 @@ func TestGithubOrganizationRulesets(t *testing.T) {
 						pattern  = "test"
 					}
 
+					copilot_code_review {
+						review_on_push = true
+						review_draft_pull_requests = false
+					}
+
 					non_fast_forward = true
 				}
 			}
@@ -193,6 +198,15 @@ func TestGithubOrganizationRulesets(t *testing.T) {
 				"rules.0.required_code_scanning.0.required_code_scanning_tool.0.tool",
 				"CodeQL",
 			),
+
+			resource.TestCheckResourceAttr(
+				"github_organization_ruleset.test", "rules.0.copilot_code_review.0.review_on_push",
+				"true",
+			),
+			resource.TestCheckResourceAttr(
+				"github_organization_ruleset.test", "rules.0.copilot_code_review.0.review_draft_pull_requests",
+				"false",
+			),
 		)
 
 		testCase := func(t *testing.T, mode string, config string) {

github/respository_rules_utils.go

@@ -547,6 +547,29 @@ func expandRules(input []interface{}, org bool) []*github.RepositoryRule {
 		}
 		rulesSlice = append(rulesSlice, github.NewFileExtensionRestrictionRule(params))
 	}
+	// Copilot code review rule
+	if v, ok := rulesMap["copilot_code_review"].([]interface{}); ok && len(v) != 0 {
+		copilotCodeReviewMap := v[0].(map[string]interface{})
+		
+		// Create parameters map
+		paramsMap := map[string]interface{}{
+			"review_on_push":              copilotCodeReviewMap["review_on_push"].(bool),
+			"review_draft_pull_requests":  copilotCodeReviewMap["review_draft_pull_requests"].(bool),
+		}
+		
+		// Marshal to JSON
+		paramsJSON, err := json.Marshal(paramsMap)
+		if err != nil {
+			log.Printf("[INFO] Error marshalling copilot_code_review parameters: %v", err)
+		} else {
+			paramsRaw := json.RawMessage(paramsJSON)
+			rule := &github.RepositoryRule{
+				Type:       "copilot_code_review",
+				Parameters: &paramsRaw,
+			}
+			rulesSlice = append(rulesSlice, rule)
+		}
+	}
 
 	return rulesSlice
 }
@@ -732,6 +755,31 @@ func flattenRules(rules []*github.RepositoryRule, org bool) []interface{} {
 			rule["min_entries_to_merge_wait_minutes"] = params.MinEntriesToMergeWaitMinutes
 			rulesMap[v.Type] = []map[string]any{rule}
 
+		case "copilot_code_review":
+			// Handle copilot_code_review rule parameters
+			var params map[string]interface{}
+			
+			err := json.Unmarshal(*v.Parameters, &params)
+			if err != nil {
+				log.Printf("[INFO] Unexpected error unmarshalling rule %s with parameters: %v",
+					v.Type, v.Parameters)
+			}
+
+			rule := make(map[string]interface{})
+			if reviewOnPush, ok := params["review_on_push"].(bool); ok {
+				rule["review_on_push"] = reviewOnPush
+			} else {
+				rule["review_on_push"] = false
+			}
+			
+			if reviewDraftPRs, ok := params["review_draft_pull_requests"].(bool); ok {
+				rule["review_draft_pull_requests"] = reviewDraftPRs
+			} else {
+				rule["review_draft_pull_requests"] = false
+			}
+			
+			rulesMap[v.Type] = []map[string]interface{}{rule}
+		
 		case "file_path_restriction":
 			var params github.RuleFileParameters
 			err := json.Unmarshal(*v.Parameters, &params)

website/docs/r/organization_ruleset.html.markdown

@@ -39,6 +39,11 @@ resource "github_organization_ruleset" "example" {
     required_linear_history = true
     required_signatures     = true
 
+    copilot_code_review {
+      review_on_push              = true
+      review_draft_pull_requests  = false
+    }
+
     branch_name_pattern {
       name     = "example"
       negate   = false
@@ -120,6 +125,8 @@ The `rules` block supports the following:
 
 * `committer_email_pattern` - (Optional) (Block List, Max: 1) Parameters to be used for the committer_email_pattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. (see [below for nested schema](#rules.committer_email_pattern))
 
+* `copilot_code_review` - (Optional) (Block List, Max: 1) Request Copilot code review for new pull requests automatically if the author has access to Copilot code review. (see [below for nested schema](#rules.copilot_code_review))
+
 * `creation` - (Optional) (Boolean) Only allow users with bypass permission to create matching refs.
 
 * `deletion` - (Optional) (Boolean) Only allow users with bypass permissions to delete matching refs.
@@ -190,6 +197,12 @@ The `rules` block supports the following:
 
 * `negate` - (Optional) (Boolean) If true, the rule will fail if the pattern matches.
 
+#### rules.copilot_code_review ####
+
+* `review_on_push` - (Optional) (Boolean) Copilot automatically reviews each new push to the pull request. Defaults to `false`.
+
+* `review_draft_pull_requests` - (Optional) (Boolean) Copilot automatically reviews draft pull requests before they are marked as ready for review. Defaults to `false`.
+
 #### rules.pull_request ####
 
 * `dismiss_stale_reviews_on_push` - (Optional) (Boolean) New, reviewable commits pushed will dismiss previous pull request review approvals. Defaults to `false`.