11.stylix/.github/workflows/labels.yml
NAHO 97d412d949
ci: enable stricter Bash error checking
Co-authored-by: Matt Sturgeon <matt@sturgeon.me.uk>
2025-11-20 22:58:08 +01:00

44 lines
1.2 KiB
YAML

# Adapted from
# https://github.com/NixOS/nixpkgs/blob/8ed4f7b5a62b2e41606eb66b4c5f6d142f46370b/.github/workflows/labels.yml
# Copyright (c) 2003-2025 Eelco Dolstra and the Nixpkgs/NixOS contributors
#
# WARNING:
# When extending this action, be aware that $GITHUB_TOKEN allows some write
# access to the GitHub API. This means that it should not evaluate user input in
# a way that allows code injection.
---
name: "Label PR"
on:
pull_request_target:
types: [edited, opened, synchronize, reopened]
permissions:
contents: read
pull-requests: write
defaults:
run:
shell: bash
jobs:
labels:
name: label-pr
runs-on: ubuntu-24.04
if: >
vars.APP_ID &&
!contains(github.event.pull_request.title, '[skip treewide]')
steps:
- uses: actions/create-github-app-token@v2
id: app-token
with:
app-id: ${{ vars.APP_ID }}
private-key: ${{ secrets.APP_PRIVATE_KEY }}
permission-contents: read
permission-pull-requests: write
- uses: actions/labeler@v6.0.1
with:
repo-token: ${{ steps.app-token.outputs.token }}
configuration-path: .github/labeler.yml
sync-labels: false