mirror of
https://github.com/carbon-language/carbon-lang.git
synced 2026-09-24 19:30:12 +01:00
Chandler CarruthandDana Jansens
5da651032f
Assisted-by: Antigravity with Gemini --------- Co-authored-by: Dana Jansens <danakj@orodu.net>
34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
# Part of the Carbon Language project, under the Apache License v2.0 with LLVM
|
|
# Exceptions. See /LICENSE for license information.
|
|
# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
|
|
|
|
name: Check Dependent Label
|
|
on:
|
|
pull_request_target:
|
|
types: [opened, synchronize, labeled, unlabeled]
|
|
|
|
# This workflow runs as `pull_request_target` so that the check can't be
|
|
# disabled or bypassed by the PR, but it doesn't need any permissions.
|
|
permissions: {}
|
|
|
|
jobs:
|
|
check_label:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
|
|
with:
|
|
disable-sudo: true
|
|
egress-policy: block
|
|
# prettier-ignore
|
|
allowed-endpoints: >
|
|
api.github.com:443
|
|
|
|
- name: Check for 'dependent' label
|
|
run: |
|
|
if [[ "${{ contains(github.event.pull_request.labels.*.name, 'dependent') }}" == "true" ]]; then
|
|
echo "PR has 'dependent' label. Blocking merge."
|
|
exit 1
|
|
fi
|
|
echo "PR does not have 'dependent' label."
|