32bfe1d186
* fix(workflows): standardize runner configuration for security jobs * ci(actionlint): add Blacksmith runner label to config Add blacksmith-2vcpu-ubuntu-2404 to actionlint self-hosted-runner labels config to suppress "unknown label" warnings during workflow linting. This label is used across all workflows after the Blacksmith migration. * fix(actionlint): adjust indentation for self-hosted runner labels * feat(security): enhance security workflow with CodeQL analysis steps * fix(security): update CodeQL action to version 4 for improved analysis * fix(security): remove duplicate permissions in security workflow * fix(security): revert CodeQL action to v3 for stability The v4 version was causing workflow file validation failures. Reverting to proven v3 version that is working on main branch. * fix(security): remove duplicate permissions causing workflow validation failure The permissions block had duplicate security-events and actions keys, which caused YAML validation errors and prevented workflow execution. Fixes: workflow file validation failures on main branch * fix(security): remove pull_request trigger to reduce costs * fix(security): restore PR trigger but skip codeql on PRs * fix(security): resolve YAML syntax error in security workflow * refactor(security): split CodeQL into dedicated scheduled workflow * fix(security): update workflow name to Rust Package Security Audit * fix(codeql): remove push trigger, keep schedule and on-demand only * feat(codeql): add CodeQL configuration file to ignore specific paths * Potential fix for code scanning alert no. 39: Hard-coded cryptographic value Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * fix(ci): resolve auto-response workflow merge markers * fix(build): restore ChannelMessage reply_target usage * ci(workflows): run workflow sanity on workflow pushes for all branches * ci(workflows): rename auto-response workflow to PR Auto Responder * ci(workflows): require owner approval for workflow file changes * ci: add lint-first PR feedback gate * ci(workflows): split label policy checks from workflow sanity * ci(workflows): consolidate policy and rust workflow setup --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
44 lines
1.6 KiB
YAML
44 lines
1.6 KiB
YAML
name: Stale
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "20 2 * * *"
|
|
workflow_dispatch:
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
stale:
|
|
permissions:
|
|
issues: write
|
|
pull-requests: write
|
|
runs-on: blacksmith-2vcpu-ubuntu-2404
|
|
steps:
|
|
- name: Mark stale issues and pull requests
|
|
uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
|
|
with:
|
|
repo-token: ${{ secrets.GITHUB_TOKEN }}
|
|
days-before-issue-stale: 21
|
|
days-before-issue-close: 7
|
|
days-before-pr-stale: 14
|
|
days-before-pr-close: 7
|
|
stale-issue-label: stale
|
|
stale-pr-label: stale
|
|
exempt-issue-labels: security,pinned,no-stale,no-pr-hygiene,maintainer
|
|
exempt-pr-labels: no-stale,no-pr-hygiene,maintainer
|
|
remove-stale-when-updated: true
|
|
exempt-all-assignees: true
|
|
operations-per-run: 300
|
|
stale-issue-message: |
|
|
This issue was automatically marked as stale due to inactivity.
|
|
Please provide an update, reproduction details, or current status to keep it open.
|
|
close-issue-message: |
|
|
Closing this issue due to inactivity.
|
|
If the problem still exists on the latest `main`, please open a new issue with fresh repro steps.
|
|
close-issue-reason: not_planned
|
|
stale-pr-message: |
|
|
This PR was automatically marked as stale due to inactivity.
|
|
Please rebase/update and post the latest validation results.
|
|
close-pr-message: |
|
|
Closing this PR due to inactivity.
|
|
Maintainers can reopen once the branch is updated and validation is provided.
|