generic/.github/workflows/pr-labeler.yml

name: PR Labeler
on:
  pull_request_target:
    types: [opened]

permissions:
  contents: read

jobs:
  pr-labeler:
    permissions:
      pull-requests: write  # for TimonVS/pr-labeler-action to add labels in PR
    runs-on: ubuntu-latest
    if: "!contains(github.event.head_commit.message, 'skip ci')"
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
        with:
          egress-policy: audit

      - uses: TimonVS/pr-labeler-action@8b99f404a073744885d8021d1de4e40c6eaf38e2 # v4.1.1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Add PR labeler and release drafter GitHub Actions Signed-off-by: Dan Yeaw <dan@yeaw.me> 2020-08-26 21:24:02 -04:00			`name: PR Labeler`
			`on:`
Fix external PRs unable to run PR labeler 2021-04-05 13:26:06 -04:00			`pull_request_target:`
Add PR labeler and release drafter GitHub Actions Signed-off-by: Dan Yeaw <dan@yeaw.me> 2020-08-26 21:24:02 -04:00			`types: [opened]`

Update permissions based on https://app.stepsecurity.io analysis. 2022-05-02 21:23:50 -04:00			`permissions:`
			`contents: read`

Add PR labeler and release drafter GitHub Actions Signed-off-by: Dan Yeaw <dan@yeaw.me> 2020-08-26 21:24:02 -04:00			`jobs:`
			`pr-labeler:`
Declare needed permissions 2022-05-01 10:59:57 -04:00			`permissions:`
Update permissions based on https://app.stepsecurity.io analysis. 2022-05-02 21:23:50 -04:00			`pull-requests: write # for TimonVS/pr-labeler-action to add labels in PR`
Add PR labeler and release drafter GitHub Actions Signed-off-by: Dan Yeaw <dan@yeaw.me> 2020-08-26 21:24:02 -04:00			`runs-on: ubuntu-latest`
			`if: "!contains(github.event.head_commit.message, 'skip ci')"`
			`steps:`
[StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> 2023-07-02 16:39:46 +00:00			`- name: Harden Runner`
Bump step-security/harden-runner from 2.6.1 to 2.7.0 (#479) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.6.1 to 2.7.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/eb238b55efaa70779f274895e782ed17c84f2895...63c24ba6bd7ba022e95695ff85de572c04a18142) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 2024-01-31 18:46:21 -05:00			`uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0`
[StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> 2023-07-02 16:39:46 +00:00			`with:`
			`egress-policy: audit`

			`- uses: TimonVS/pr-labeler-action@8b99f404a073744885d8021d1de4e40c6eaf38e2 # v4.1.1`
Add PR labeler and release drafter GitHub Actions Signed-off-by: Dan Yeaw <dan@yeaw.me> 2020-08-26 21:24:02 -04:00			`env:`
			`GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}`