Files
Cursor AgentandRotimi Best 9adc38bd8a chore(ci): harden supply-chain controls before reopening PRs
Isolate npm publish from PR CI, enforce frozen lockfiles and a 24h
minimumReleaseAge, and document safe pull_request_target usage so fork
PRs cannot reach publish credentials.

Co-authored-by: Rotimi Best <[email protected]>
2026-08-10 21:00:29 +01:00

28 lines
856 B
YAML

name: 'Assign issues with .take'
on:
issue_comment:
types:
- created
- edited
permissions:
contents: read
issues: write
jobs:
take-issue:
name: Disable take issue
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- name: Disable take an issue
uses: bdougie/[email protected]
with:
message: Thanks for taking this issue! Let us know if you have any questions!
trigger: .take
issueCurrentlyAssignedMessage: Thanks for being interested in this issue. It looks like this ticket is already assigned to a contributor.
token: ${{ secrets.GITHUB_TOKEN }}
blockingLabels: 👀 needs triage,blocked,core team work,needs design,duplicate
blockingLabelsMessage: The issue you are trying to assign yourself is blocked by the label on the issue.