Files
pulse/.github/workflows/issue-version-label-sync.yml
T
pulse-triage[bot] cc6eb37ae9 Disable automatic caching in credential-capable triage job
Complete the reviewed parser workflow integration under the existing setup-action trust rule. Keep the exact locked install and pre-token tests, without caching packages across credential-capable runs.

Contract-Neutral: Explicitly disable setup-node automatic caching; silent issue classification, authority and product behaviour remain unchanged.
Change-source: pulse-maintainer
2026-10-14 10:04:57 +01:00

60 lines
2.0 KiB
YAML

name: Issue Version Label Sync
on:
issues:
types:
- opened
- edited
- reopened
permissions:
contents: read
jobs:
sync:
if: ${{ github.event.issue.pull_request == null }}
runs-on: ubuntu-24.04
timeout-minutes: 10
steps:
- name: Check out triage helper and locked parser
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
sparse-checkout: |
.github/scripts/issue-version-triage.cjs
.github/scripts/issue-version-triage.test.cjs
.github/scripts/triage-comment-policy.test.cjs
.github/scripts/package.json
.github/scripts/package-lock.json
.github/ISSUE_TEMPLATE
.github/workflows
docs/ISSUE_TRIAGE.md
sparse-checkout-cone-mode: false
- name: Set up Node.js
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24'
package-manager-cache: false
- name: Install locked parser without lifecycle scripts
run: npm ci --ignore-scripts --no-audit --no-fund --prefix .github/scripts
- name: Verify silent triage before obtaining its write credential
run: npm run test:triage --prefix .github/scripts
- name: Mint triage bot token
id: triage-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
app-id: 2484142
private-key: ${{ secrets.PULSE_TRIAGE_APP_PRIVATE_KEY }}
- name: Sync issue version metadata
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
with:
github-token: ${{ steps.triage-token.outputs.token }}
script: |
const triage = require(`${process.env.GITHUB_WORKSPACE}/.github/scripts/issue-version-triage.cjs`);
await triage.syncLabels({ github, context, core });