From 77940116e6818ef5eb4eb8247aab6e75574bf0a3 Mon Sep 17 00:00:00 2001
From: Robyn MacCallum <robyntmaccallum@gmail.com>
Date: Mon, 21 Jul 2025 16:15:39 -0400
Subject: [PATCH] DDG integration files modified workflow (#15665)

* Create alert-ddg-files-modified.yml

* Update alert-ddg-files-modified.yml

* Add encrypted-message-handler.service to alert-ddg-files-modified.yml

* Pin action versions

* Add permissions

* Update alert-ddg-files-modified.yml

* Update alert-ddg-files-modified.yml

* Add parameter to get list of files changed

* Wording update

* Update CODEOWNERS

* Make branch target main
---
 .github/CODEOWNERS                            |  2 +
 .../workflows/alert-ddg-files-modified.yml    | 50 +++++++++++++++++++
 2 files changed, 52 insertions(+)
 create mode 100644 .github/workflows/alert-ddg-files-modified.yml

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index ef2e26916e5..7d7fec2a5ea 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -138,6 +138,8 @@ apps/desktop/desktop_native/autotype @bitwarden/team-autofill-dev
 # DuckDuckGo integration
 apps/desktop/native-messaging-test-runner @bitwarden/team-autofill-dev
 apps/desktop/src/services/duckduckgo-message-handler.service.ts @bitwarden/team-autofill-dev
+apps/desktop/src/services/encrypted-message-handler.service.ts @bitwarden/team-autofill-dev
+.github/workflows/alert-ddg-files-modified.yml @bitwarden/team-autofill-dev
 # SSH Agent
 apps/desktop/desktop_native/core/src/ssh_agent @bitwarden/team-autofill-dev @bitwarden/wg-ssh-keys
 
diff --git a/.github/workflows/alert-ddg-files-modified.yml b/.github/workflows/alert-ddg-files-modified.yml
new file mode 100644
index 00000000000..61bb7f1e8af
--- /dev/null
+++ b/.github/workflows/alert-ddg-files-modified.yml
@@ -0,0 +1,50 @@
+name: DDG File Change Monitor
+
+on:
+  pull_request:
+    branches: [ main ]
+    types: [ opened, synchronize ]
+
+jobs:
+  check-files:
+    name: Check files
+    runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        fetch-depth: 0
+
+    - name: Get changed files
+      id: changed-files
+      uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+      with:
+        list-files: shell
+        filters: |
+          monitored:
+            - 'apps/desktop/native-messaging-test-runner/**'
+            - 'apps/desktop/src/services/duckduckgo-message-handler.service.ts'
+            - 'apps/desktop/src/services/encrypted-message-handler.service.ts'
+
+    - name: Comment on PR if monitored files changed
+      if: steps.changed-files.outputs.monitored == 'true'
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      with:
+        script: |
+          const changedFiles = `${{ steps.changed-files.outputs.monitored_files }}`.split(' ').filter(file => file.trim() !== '');
+
+          const message = `⚠️🦆 **DuckDuckGo Integration files have been modified in this PR:**
+          
+          ${changedFiles.map(file => `- \`${file}\``).join('\n')}
+          
+          Please run the DuckDuckGo native messaging test runner from this branch using [these instructions](https://contributing.bitwarden.com/getting-started/clients/desktop/native-messaging-test-runner) and ensure it functions properly.`;
+          
+          github.rest.issues.createComment({
+            issue_number: context.issue.number,
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            body: message
+          });