mirror of
https://github.com/tiennm99/is-a-dev.git
synced 2026-10-05 20:15:01 +00:00
DIBSTER
8d19ccbcb2
Updated all GitHub Actions dependencies across workflows to use full commit SHAs instead of mutable version tags (e.g., `actions/checkout`, `actions/setup-node`, and `actions/stale`). This hardens the CI/CD pipeline by ensuring action dependencies are strictly immutable and prevents potential supply chain attacks.
23 lines
827 B
YAML
23 lines
827 B
YAML
name: Stale
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 12 * * *"
|
|
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
label:
|
|
name: Label
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
|
|
with:
|
|
repo-token: ${{ secrets.GITHUB_TOKEN }}
|
|
days-before-stale: 3
|
|
days-before-close: 2
|
|
stale-issue-message: "This issue has been marked as stale due to inactivity and will be closed. Comment anything on this issue to prevent it"
|
|
stale-pr-message: "This pull request has been marked as stale due to inactivity and will be closed. Comment anything on this PR to prevent it"
|
|
exempt-issue-labels: "no-stale"
|
|
exempt-pr-labels: "no-stale"
|