mirror of
https://github.com/libretro/virtualjaguar-libretro.git
synced 2026-11-09 11:51:42 -10:00
Joe MattielloandClaude Opus 5.5
b58f42acea
Set `permissions: contents: read` at the top of every workflow and grant more per job only where that job uses it, so the repo's default workflow token can later be flipped to read-only without breaking CI. No step, trigger or `runs-on` changes; same-repo runner guards are intact. Co-authored-by: Claude Opus 5.5 <[email protected]>
29 lines
869 B
YAML
29 lines
869 B
YAML
name: Pull Request on Branch Push
|
|
on:
|
|
push:
|
|
branches-ignore:
|
|
- staging
|
|
- launchpad
|
|
- production
|
|
# develop is the PR target, never a source; a push there only burned a runner.
|
|
- develop
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
auto-pull-request:
|
|
name: PullRequestAction
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
runs-on: ${{ contains(fromJSON(vars.VJ_TEMP_RUNNERS || '{"refs":[]}').refs, github.ref) && fromJSON(vars.VJ_TEMP_RUNNERS)['ubuntu-latest'] || 'ubuntu-latest' }}
|
|
steps:
|
|
- name: pull-request-action
|
|
uses: vsoch/pull-request-action@master
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
BRANCH_PREFIX: 'feature/'
|
|
# GitFlow: feature/* branches integrate via develop.
|
|
PULL_REQUEST_BRANCH: 'develop'
|
|
PULL_REQUEST_DRAFT: true
|