Files
glances/.github/workflows/inactive_issues.yml
nicolargo 599c193258 Harden GitHub Actions workflows: minimal permissions, SHA pins, timeouts
- Add top-level  on caller (ci.yml) and scheduled/event
    workflows (inactive_issues.yml, needs_contributor.yml)
  - Declare explicit job-level permissions across all reusable workflows
  - Pin all third-party actions to immutable commit SHAs (was using mutable
    tags, including the critical )
  - Align codeql-action on v3 across quality.yml and cyber.yml
  - Add timeout-minutes on every job to prevent runaway builds
  - Add concurrency group on ci.yml with cancel-in-progress for PRs only
  - Add .github/dependabot.yml for automated SHA and npm dependency updates
2026-03-15 18:23:06 +01:00

26 lines
793 B
YAML

name: Label inactive issues
on:
schedule:
- cron: "30 1 * * *"
permissions: {}
jobs:
close-issues:
runs-on: ubuntu-latest
timeout-minutes: 5
permissions:
issues: write
pull-requests: write
steps:
- uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
with:
days-before-issue-stale: 90
days-before-issue-close: -1
stale-issue-label: "inactive"
stale-issue-message: "This issue is stale because it has been open for 3 months with no activity."
close-issue-message: "This issue was closed because it has been inactive for 30 days since being marked as stale."
days-before-pr-stale: -1
days-before-pr-close: -1
repo-token: ${{ secrets.GITHUB_TOKEN }}