chore(deps-dev): Bump the dev group with 8 updates #25
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: AgentScan | |
| on: | |
| # Do NOT add actions/checkout to this workflow: pull_request_target runs | |
| # with write permissions, so checking out PR code would allow a malicious | |
| # PR to run arbitrary code with access to the token. | |
| # Only `opened` (not `reopened`): a flagged PR/issue that gets reopened | |
| # stays open for manual review, as the flag messages promise. | |
| # To trigger a scan manually, add the `agentscan:scan` label to any PR | |
| # or issue (remove and re-add it to re-scan). | |
| pull_request_target: | |
| types: | |
| - opened | |
| - labeled | |
| issues: | |
| types: | |
| - opened | |
| - labeled | |
| concurrency: | |
| group: agentscan-${{ github.event.pull_request.number || github.event.issue.number }} | |
| cancel-in-progress: true | |
| jobs: | |
| agentscan: | |
| # On `labeled` events, only run for the manual-trigger label (the scan | |
| # itself adds `agentscan:*` labels, which must not re-trigger it). | |
| if: github.event.action != 'labeled' || github.event.label.name == 'agentscan:scan' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| pull-requests: write | |
| issues: write | |
| contents: read | |
| steps: | |
| - name: AgentScan | |
| uses: MatteoGabriele/agentscan-action@8112fb79b33fafb8506159df20129a34209ac410 # v2.5.0 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| scan-issues: true | |
| auto-close: true | |
| trusted-author-associations: '["owner", "member", "collaborator"]' | |
| # Only `automation` and community-flagged accounts are auto-closed | |
| # (the action's default); `mixed` is labeled and left open. | |
| message-mixed: | | |
| This was flagged as potentially not having a human behind it. | |
| If this was flagged in error, we apologize. | |
| A maintainer will review it manually. | |
| message-automation: | | |
| This was flagged as potentially not having a human behind it, and so it was closed. | |
| If this was flagged in error, we apologize. | |
| Please reopen it and we will manually review it. | |
| message-community-flagged: | | |
| This was flagged as potentially not having a human behind it, and so it was closed. | |
| If this was flagged in error, we apologize. | |
| Please reopen it and we will manually review it. |