Add missing workflow files from OSPO actions#11
Merged
Conversation
Added standard workflows used across OSPO GitHub Actions: - auto-labeler.yml: Automatically labels PRs based on release-drafter config - copilot-setup-steps.yml: Documents Copilot CLI setup for contributors - linter.yaml: Runs super-linter on PRs to enforce code quality - pr-title.yml: Validates PR titles follow conventional commit format - scorecard.yml: Runs OpenSSF Scorecard security analysis - stale.yaml: Closes stale issues after 35 days of inactivity - release-drafter.yml: Configuration for auto-labeler and release notes These workflows provide: - Automated PR labeling for release notes - Code quality enforcement via linting - Security scanning via Scorecard - Stale issue management - PR title validation Brings pr-conflict-detector in line with other OSPO actions like issue-metrics, stale-repos, contributors, etc. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
zkoppert
commented
Mar 10, 2026
jmeridth
approved these changes
Mar 10, 2026
Collaborator
jmeridth
left a comment
jmeridth
left a comment
There was a problem hiding this comment.
Python version non-blocking. LGTM
Collaborator
|
Ah, we need the .github/linters folder files. |
Signed-off-by: jmeridth <jmeridth@gmail.com>
Signed-off-by: jmeridth <jmeridth@gmail.com>
- full .dependabot.yml with cooldown - prettier on README.md Signed-off-by: jmeridth <jmeridth@gmail.com>
Signed-off-by: jmeridth <jmeridth@gmail.com>
Signed-off-by: jmeridth <jmeridth@gmail.com>
Signed-off-by: jmeridth <jmeridth@gmail.com>
Signed-off-by: jmeridth <jmeridth@gmail.com>
Signed-off-by: jmeridth <jmeridth@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR adds standard workflow files that are used across other OSPO GitHub Actions but were missing from pr-conflict-detector.
New Workflows
Code Quality & Security
Release Management
Repository Maintenance
Why This Matters
Auto-labeler fixes the release workflow
The release workflow was failing because PRs need labels like
feature,breaking, orreleaseto trigger a release. Auto-labeler will automatically add these labels based on changed files.Consistency with other OSPO actions
These workflows are standard across:
Testing
Breaking Changes
None - all workflows are additive.