| name: "PR Labeler" |
| |
| on: |
| pull_request_target: |
| types: ["opened", "reopened", "ready_for_review"] |
| |
| permissions: |
| contents: read |
| |
| jobs: |
| triage: |
| permissions: |
| contents: read |
| pull-requests: write |
| runs-on: ubuntu-latest |
| steps: |
| - name: Harden Runner |
| uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1 |
| with: |
| egress-policy: audit |
| |
| - uses: actions/labeler@ac9175f8a1f3625fd0d4fb234536d26811351594 # v4.3.0 |
| if: ${{ github.event.pull_request.draft == false && github.event.pull_request.user.login != 'bazel-io' }} |
