Thore CimbalandClaude Fable 5
8fb630cfb3
Registry-Entscheidung evidenzbasiert: das Package ist pnpm-Dependency von ThreadNet-Webs apps/web, der Lockfile pinnt die Tarball-URL auf rohana - Registry bleibt dort. Publish-Auth ueber CI-Variable GITEA_NPM_TOKEN statt lokaler Klartext-.npmrc. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
27 lines
798 B
YAML
27 lines
798 B
YAML
name: Prevent blocked
|
|
on:
|
|
# zizmor: ignore[dangerous-triggers]
|
|
# Reason: This workflow does not checkout code or use secrets.
|
|
# It only reads labels to set a failure status on the PR.
|
|
pull_request_target:
|
|
types: [opened, labeled, unlabeled, synchronize]
|
|
|
|
permissions:
|
|
pull-requests: read
|
|
# Required to fail the check on the PR
|
|
statuses: write
|
|
|
|
jobs:
|
|
prevent-blocked:
|
|
name: Prevent blocked
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
pull-requests: read
|
|
steps:
|
|
- name: Add notice
|
|
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
|
|
if: contains(github.event.pull_request.labels.*.name, 'X-Blocked')
|
|
with:
|
|
script: |
|
|
core.setFailed("PR has been labeled with X-Blocked; it cannot be merged.");
|