| name: "PR Labeler" |
| |
| on: |
| pull_request_target: |
| types: ["opened", "reopened", "ready_for_review"] |
| |
| permissions: |
| contents: read |
| |
| jobs: |
| triage: |
| permissions: |
| contents: read |
| pull-requests: write |
| runs-on: ubuntu-latest |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| with: |
| egress-policy: audit |
| |
| - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0 |
| if: ${{ github.event.pull_request.draft == false && github.event.pull_request.user.login != 'bazel-io' }} |
