Files
pezkuwi-ui/.github/workflows/lock.yml
T
Satoshi Qazi Muhammed bf624dd444 ci: give every workflow an explicit least-privilege GITHUB_TOKEN
CodeQL actions/missing-workflow-permissions: lock.yml, pr-any.yml had no permissions block, so their jobs received the repository default token. Read-only where nothing writes through GITHUB_TOKEN; lock-threads gets the issues/pull-requests/discussions write it documents; workflows that write do it with a separate bot or app token, so GITHUB_TOKEN stays read-only.
2026-10-20 22:29:37 +04:00

32 lines
903 B
YAML

name: 'Lock Threads'
on:
workflow_dispatch:
schedule:
- cron: '25 2/3 * * *'
# dessant/lock-threads locks closed issues, PRs and discussions.
permissions:
issues: write
pull-requests: write
discussions: write
jobs:
lock:
runs-on: ubuntu-latest
steps:
- uses: dessant/lock-threads@v5
with:
github-token: ${{ github.token }}
issue-inactive-days: '7'
issue-comment: >
This thread has been automatically locked since there has not been
any recent activity after it was closed. Please open a new issue
if you think you have a related problem or query.
pr-inactive-days: '2'
pr-comment: >
This pull request has been automatically locked since there
has not been any recent activity after it was closed.
Please open a new issue for related bugs.