| name: cherry-picker-on-close |
| |
| on: |
| pull_request_target: |
| types: [closed] |
| |
| env: |
| GH_TOKEN: ${{ secrets.BAZEL_IO_TOKEN }} |
| |
| jobs: |
| cherry-picker-on-close: |
| if: github.event.sender.login == 'copybara-service[bot]' |
| runs-on: ubuntu-latest |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 |
| with: |
| egress-policy: audit |
| - name: Run cherrypicker on close |
| uses: bazelbuild/continuous-integration/actions/cherry-picker@8e5a455aae36cdcce8604ab298ace487825239b2 |
| with: |
| triggered-on: closed |
| pr-number: ${{ github.event.number }} |
| is-prod: True |