From ab582266f8c801f93e7f971ceb6e26e25308a1f5 Mon Sep 17 00:00:00 2001 From: Robert Waffen Date: Thu, 9 Jul 2026 16:03:07 +0200 Subject: [PATCH 1/2] ci: add labeler workflow Signed-off-by: Robert Waffen --- .github/workflows/labeler.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .github/workflows/labeler.yml diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml new file mode 100644 index 00000000..0b2693c4 --- /dev/null +++ b/.github/workflows/labeler.yml @@ -0,0 +1,18 @@ +--- +name: 🏷️ Pull Request Labeler + +on: + - pull_request_target + +permissions: + contents: read + +jobs: + labeler: + name: Labeler + runs-on: ubuntu-latest + if: github.repository_owner == 'voxpupuli' || github.repository_owner == 'OpenVoxProject' + permissions: + pull-requests: write + steps: + - uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0 From 2fc576d9eb976fec5ff40676b8c6af09dfebacf6 Mon Sep 17 00:00:00 2001 From: Robert Waffen Date: Thu, 9 Jul 2026 16:29:51 +0200 Subject: [PATCH 2/2] ci: set permissions to zero Signed-off-by: Robert Waffen --- .github/workflows/labeler.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 0b2693c4..c3984ad6 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -4,8 +4,7 @@ name: 🏷️ Pull Request Labeler on: - pull_request_target -permissions: - contents: read +permissions: {} jobs: labeler: