26 lines
818 B
YAML
26 lines
818 B
YAML
name: 'Pull Request Labeler'
|
|
on:
|
|
- pull_request_target # zizmor: ignore[dangerous-triggers] no attacker inputs are used here
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
labeler:
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- id: token
|
|
uses: immich-app/devtools/actions/create-workflow-token@df46d635b905e618b88fc4c95baa920aeb30b309 # create-workflow-token-action-v3.0.1
|
|
with:
|
|
client-id: ${{ secrets.PUSH_O_MATIC_APP_CLIENT_ID }}
|
|
private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
|
|
permission-contents: read
|
|
permission-pull-requests: write
|
|
|
|
- uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
|
|
with:
|
|
repo-token: ${{ steps.token.outputs.token }}
|
|
sync-labels: true
|