mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-03 18:47:04 +09:00
Aleksei Sviridkin
8aa30472b6
The comment above the top-level `permissions` block claimed that jobs request the minimum extra scopes on top of it. A job-level block does not add to the workflow-level one: it replaces it, and every scope the job does not name is set to none. A job needing one extra scope has to restate `contents: read` alongside it or lose read access to the repository. The corrected wording states the replace semantics, so the next job block written against this comment grants the whole set it needs rather than only the delta. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>
60 lines
2.4 KiB
YAML
60 lines
2.4 KiB
YAML
name: Stale issues
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '37 4 * * *' # daily at 04:37 UTC
|
|
workflow_dispatch:
|
|
|
|
# Top-level token defaults to read-only. A job-level block replaces this one
|
|
# rather than adding to it, so each job restates every scope it needs.
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: stale
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
stale:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
issues: write
|
|
pull-requests: write
|
|
steps:
|
|
- uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10
|
|
with:
|
|
stale-issue-label: lifecycle/stale
|
|
stale-pr-label: lifecycle/stale
|
|
close-issue-label: lifecycle/rotten
|
|
close-pr-label: lifecycle/rotten
|
|
# Exempt lists differ on purpose: issues sit longer than PRs by nature.
|
|
# An accepted issue (`triage/accepted`) is a known long-tail task, not stale;
|
|
# a held PR (`do-not-merge/hold`) is paused intentionally and shouldn't auto-close.
|
|
# Priority/security/regression labels protect issues that someone explicitly
|
|
# decided to keep visible.
|
|
exempt-issue-labels: >-
|
|
lifecycle/frozen,epic,
|
|
priority/critical-urgent,priority/important-soon,priority/important-longterm,
|
|
security/critical,security/high,security/confirmed,
|
|
security/triage-needed,security/in-progress,
|
|
triage/accepted,kind/regression
|
|
exempt-pr-labels: >-
|
|
lifecycle/frozen,do-not-merge/hold,
|
|
backport,backport-previous
|
|
days-before-stale: 60
|
|
days-before-close: 14
|
|
operations-per-run: 100
|
|
remove-stale-when-updated: true
|
|
stale-issue-message: |
|
|
This issue has had no activity for 60 days and was marked `lifecycle/stale`.
|
|
It will be closed in 14 days unless commented or labelled `lifecycle/frozen`.
|
|
stale-pr-message: |
|
|
This PR has had no activity for 60 days and was marked `lifecycle/stale`.
|
|
It will be closed in 14 days unless commented or labelled `lifecycle/frozen`.
|
|
close-issue-message: |
|
|
Closed because no activity followed the `lifecycle/stale` warning.
|
|
Reopen if the issue is still relevant.
|
|
close-pr-message: |
|
|
Closed because no activity followed the `lifecycle/stale` warning.
|
|
Reopen if the change is still wanted.
|