Release v0.56.8 #331
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Interaction guard | |
| on: | |
| issues: | |
| types: [opened, reopened] | |
| pull_request_target: | |
| types: [opened, reopened] | |
| permissions: | |
| contents: read | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| guard: | |
| # Skip maintainer-authored events entirely: no runner spin-up. The guard only | |
| # exists for untrusted authors. Keep this tiny Node policy job on GitHub's | |
| # standard Ubuntu runner, which is free for this public repository, so the | |
| # Blacksmith allowance stays reserved for manual Windows backup CI. | |
| if: >- | |
| vars.CI_BUDGET_MODE != 'off' && | |
| !contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), | |
| github.event.pull_request.author_association || github.event.issue.author_association) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - run: node .github/scripts/interaction-guard.mjs | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |