Skip to content
Close external pull requests

[StepSecurity] Apply security best practices #33

Sign in to view logs

[StepSecurity] Apply security best practices

[StepSecurity] Apply security best practices #33

Workflow file for this run

.github/workflows/close-pull-requests.yml at 6bd9349
name: Close external pull requests

Check warning on line 1 in .github/workflows/close-pull-requests.yml

View workflow run for this annotation

GitHub Actions / Close external pull requests

Workflow execution policy warning (evaluate mode) 

On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
# This repository is for releases and issue tracking only and does not accept
# code contributions. Forking (and therefore opening a PR) cannot be disabled on
# a public repository, so any pull request opened by someone who is not an org
# member or collaborator is closed automatically with a pointer to the issue tracker.
on:
pull_request_target:
types: [opened, reopened]
permissions:
pull-requests: write
jobs:
close:
runs-on: ubuntu-stepsecurity-x64
if: >-
github.event.pull_request.author_association != 'OWNER' &&
github.event.pull_request.author_association != 'MEMBER' &&
github.event.pull_request.author_association != 'COLLABORATOR'
steps:
- uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
with:
script: |
const { owner, repo } = context.repo;
const number = context.payload.pull_request.number;
await github.rest.issues.createComment({
owner, repo, issue_number: number,
body: [
"Thanks for your interest in the Tabnine plugin for opencode.",
"",
"This repository is for releases and issue tracking only and does not accept code contributions, so this pull request is being closed automatically.",
"",
"If you have a bug or a feature request, please open an issue instead: https://github.com/codota/tabnine-opencode-public/issues/new/choose",
].join("\n"),
});
await github.rest.pulls.update({
owner, repo, pull_number: number, state: "closed",
});