fix: Prevent any users from approving custom policy sets #2483
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: pr-size | |
| on: [pull_request] | |
| permissions: | |
| contents: read | |
| jobs: | |
| labeler: | |
| permissions: | |
| pull-requests: write # for codelytv/pr-size-labeler to add labels & comment on PRs | |
| runs-on: ubuntu-latest | |
| name: Label the PR size | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 | |
| with: | |
| egress-policy: audit | |
| - uses: codelytv/pr-size-labeler@c7a55a022747628b50f3eb5bf863b9e796b8f274 # v1 | |
| with: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| xs_label: 'size/xs' | |
| xs_max_size: '10' | |
| s_label: 'size/s' | |
| s_max_size: '200' | |
| m_label: 'size/m' | |
| m_max_size: '1000' | |
| l_label: 'size/l' | |
| l_max_size: '10000' | |
| xl_label: 'size/xl' | |
| fail_if_xl: 'false' | |
| message_if_xl: > | |
| This PR exceeds the recommended size of 1000 lines. | |
| Please make sure you are NOT addressing multiple issues with one PR. | |
| Note this PR might be rejected due to its size. | |
| github_api_url: 'https://api.github.com' | |
| files_to_ignore: '' |