mirror of
https://github.com/streamyfin/streamyfin.git
synced 2026-06-05 13:38:27 +01:00
7035c6f853
Pin eps1lon/actions-label-merge-conflict to v3.1.0 (0273be7) and add a
top-level permissions: {} so the workflow defaults to no permissions and the
job grants only contents:read and pull-requests:write.
32 lines
1.2 KiB
YAML
32 lines
1.2 KiB
YAML
name: 🏷️🔀Merge Conflict Labeler
|
||
|
||
on:
|
||
push:
|
||
branches: [develop]
|
||
# SECURITY: pull_request_target runs with the base repo's write token and secrets.
|
||
# This job only labels via the API and is safe ONLY because it never checks out or
|
||
# runs the PR head's code. NEVER add `actions/checkout` of the PR head (or any `run:`
|
||
# that interpolates PR-controlled data) to this workflow — that would turn it into a
|
||
# full repo-compromise vector.
|
||
pull_request_target:
|
||
branches: [develop]
|
||
types: [synchronize]
|
||
|
||
permissions: {}
|
||
|
||
jobs:
|
||
label:
|
||
name: 🏷️ Labeling Merge Conflicts
|
||
runs-on: ubuntu-24.04
|
||
if: ${{ github.repository == 'streamyfin/streamyfin' }}
|
||
permissions:
|
||
contents: read
|
||
pull-requests: write
|
||
steps:
|
||
- name: 🚩 Apply merge conflict label
|
||
uses: eps1lon/actions-label-merge-conflict@0273be72a0bbd58fcd71d0d6c02c209b50d1e5e1 # v3.1.0
|
||
with:
|
||
dirtyLabel: '⚔️ merge-conflict'
|
||
commentOnDirty: 'This pull request has merge conflicts. Please resolve the conflicts so the PR can be successfully reviewed and merged.'
|
||
repoToken: '${{ secrets.GITHUB_TOKEN }}'
|