From ad6921f27615350357e1578bf5e4e074c9e4a860 Mon Sep 17 00:00:00 2001
From: Mitchell Hashimoto <m@mitchellh.com>
Date: Tue, 10 Feb 2026 15:44:30 -0800
Subject: [PATCH] Use mitchellh/vouch

---
 .github/VOUCHED.td                            |  6 ++--
 .github/workflows/vouch-check-issue.yml       | 20 +++++++++++++
 .github/workflows/vouch-check-pr.yml          | 20 +++++++++++++
 .../workflows/vouch-manage-by-discussion.yml  | 29 +++++++++++++++++++
 4 files changed, 72 insertions(+), 3 deletions(-)
 create mode 100644 .github/workflows/vouch-check-issue.yml
 create mode 100644 .github/workflows/vouch-check-pr.yml
 create mode 100644 .github/workflows/vouch-manage-by-discussion.yml

diff --git a/.github/VOUCHED.td b/.github/VOUCHED.td
index 9ddc76e89..e9dad0308 100644
--- a/.github/VOUCHED.td
+++ b/.github/VOUCHED.td
@@ -15,7 +15,7 @@
 #  - To denounce a user, prefix with minus: `-username` or `-platform:username`.
 #  - Optionally, add comments after a space following the handle.
 #
-# Maintainers can vouch for new contributors by commenting "lgtm" on an
-# issue by the author. Maintainers can denounce users by commenting
-# "denounce" or "denounce [username]" on an issue or PR.
+# Maintainers can vouch for new contributors by commenting "!vouch" on a
+# discussion by the author. Maintainers can denounce users by commenting
+# "!denounce" or "!denounce [username]" on a discussion.
 mitchellh
diff --git a/.github/workflows/vouch-check-issue.yml b/.github/workflows/vouch-check-issue.yml
new file mode 100644
index 000000000..b9a7f5f01
--- /dev/null
+++ b/.github/workflows/vouch-check-issue.yml
@@ -0,0 +1,20 @@
+on:
+  issues:
+    types: [opened, reopened]
+
+name: "Vouch - Check Issue"
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  check:
+    runs-on: namespace-profile-ghostty-xsm
+    steps:
+      - uses: mitchellh/vouch/action/check-issue@v1
+        with:
+          issue-number: ${{ github.event.issue.number }}
+          auto-close: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/vouch-check-pr.yml b/.github/workflows/vouch-check-pr.yml
new file mode 100644
index 000000000..879c7da01
--- /dev/null
+++ b/.github/workflows/vouch-check-pr.yml
@@ -0,0 +1,20 @@
+on:
+  pull_request_target:
+    types: [opened, reopened]
+
+name: "Vouch - Check PR"
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  check:
+    runs-on: namespace-profile-ghostty-xsm
+    steps:
+      - uses: mitchellh/vouch/action/check-pr@v1
+        with:
+          pr-number: ${{ github.event.pull_request.number }}
+          auto-close: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/vouch-manage-by-discussion.yml b/.github/workflows/vouch-manage-by-discussion.yml
new file mode 100644
index 000000000..9b5dd8d13
--- /dev/null
+++ b/.github/workflows/vouch-manage-by-discussion.yml
@@ -0,0 +1,29 @@
+on:
+  discussion_comment:
+    types: [created]
+
+name: "Vouch - Manage by Discussion"
+
+concurrency:
+  group: vouch-manage
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  discussions: write
+
+jobs:
+  manage:
+    runs-on: namespace-profile-ghostty-xsm
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - uses: mitchellh/vouch/action/manage-by-discussion@v1
+        with:
+          discussion-number: ${{ github.event.discussion.number }}
+          comment-node-id: ${{ github.event.comment.node_id }}
+          vouch-keyword: "!vouch"
+          denounce-keyword: "!denounce"
+          unvouch-keyword: "!unvouch"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}