| name: "PR Labeler" |
| |
| on: |
| pull_request_target: |
| types: ["opened", "reopened", "ready_for_review"] |
| |
| permissions: |
| contents: read |
| |
| jobs: |
| triage: |
| permissions: |
| contents: read |
| pull-requests: write |
| runs-on: ubuntu-latest |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 |
| with: |
| egress-policy: audit |
| |
| - uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0 |
| if: ${{ github.event.pull_request.draft == false && github.event.pull_request.user.login != 'bazel-io' }} |