Isolate npm publish from PR CI, enforce frozen lockfiles and a 24h minimumReleaseAge, and document safe pull_request_target usage so fork PRs cannot reach publish credentials. Co-authored-by: Rotimi Best <rotimi-best@users.noreply.github.com>
28 lines
856 B
YAML
28 lines
856 B
YAML
name: 'Assign issues with .take'
|
|
|
|
on:
|
|
issue_comment:
|
|
types:
|
|
- created
|
|
- edited
|
|
|
|
permissions:
|
|
contents: read
|
|
issues: write
|
|
|
|
jobs:
|
|
take-issue:
|
|
name: Disable take issue
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 10
|
|
steps:
|
|
- name: Disable take an issue
|
|
uses: bdougie/take-action@v1.6
|
|
with:
|
|
message: Thanks for taking this issue! Let us know if you have any questions!
|
|
trigger: .take
|
|
issueCurrentlyAssignedMessage: Thanks for being interested in this issue. It looks like this ticket is already assigned to a contributor.
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
blockingLabels: 👀 needs triage,blocked,core team work,needs design,duplicate
|
|
blockingLabelsMessage: The issue you are trying to assign yourself is blocked by the label on the issue.
|