* ci: pull_request.yml pin deps * ci: security-action.yml pin deps * ci: update-dep.yml pin deps
29 lines
875 B
YAML
29 lines
875 B
YAML
name: Pull Request
|
|
|
|
on:
|
|
pull_request:
|
|
types: [opened, reopened, closed]
|
|
|
|
# Setting permissions for GITHUB_TOKEN for dependabot as default is readonly
|
|
# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/automating-dependabot-with-github-actions?learn=dependency_version_updates&learnProduct=code-security
|
|
|
|
permissions:
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
assign:
|
|
name: Assign author to PR
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Assign author to PR
|
|
uses: technote-space/assign-author@9558557c5c4816f38bd06176fbc324ba14bb3160 # v1.6.2
|
|
# See: .github/labeler.yml
|
|
label:
|
|
name: Assign labels automatically
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/labeler@ac9175f8a1f3625fd0d4fb234536d26811351594 # v4.3.0
|
|
with:
|
|
repo-token: "${{ secrets.GITHUB_TOKEN }}"
|
|
|