Skip to content

Create label.yml#1814

Closed
a9971 wants to merge 2 commits intoopenai:masterfrom
a9971:master
Closed

Create label.yml#1814
a9971 wants to merge 2 commits intoopenai:masterfrom
a9971:master

Conversation

@a9971
Copy link
Copy Markdown

@a9971 a9971 commented Apr 4, 2026

  • I understand that this repository is auto-generated and my pull request may not be merged

Changes being requested

Additional context & links

@a9971 a9971 requested a review from a team as a code owner April 4, 2026 18:41
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 52e8eb7b2d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +20 to +22
- uses: actions/labeler@v4
with:
repo-token: "${{ secrets.GITHUB_TOKEN }}"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add a labeler config before enabling this workflow

This job runs actions/labeler without a configuration-path, so it uses the default .github/labeler.yml, but that file is not present anywhere under .github in this repo. In v4, a missing config causes getLabelGlobs to throw and the action marks the run as failed, so every pull_request_target execution will fail until a config file is added (or an existing path is configured).

Useful? React with 👍 / 👎.

pull-requests: write

steps:
- uses: actions/labeler@v4
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Pin the labeler action to an immutable commit SHA

Using actions/labeler@v4 references a mutable tag, so the behavior of this write-permission pull_request_target workflow can change without any commit in this repository. Other workflows here are SHA-pinned, so this introduces a supply-chain and reproducibility regression; pinning to a specific commit hash avoids unexpected updates.

Useful? React with 👍 / 👎.

@a9971 a9971 closed this by deleting the head repository Apr 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant