nextcloud-android/.github/workflows/autoApproveDependabot.yml
tobiasKaminsky 92d3f08f6a
Setting token permissions to read-only follows the principle of least privilege.
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
2022-06-13 14:23:55 +02:00

16 lines
437 B
YAML

name: Auto approve
on:
pull_request_target:
branches: [ master, stable-* ]
permissions:
pull-requests: write
jobs:
auto-approve:
runs-on: ubuntu-latest
steps:
- uses: hmarr/auto-approve-action@v2.2.1
if: github.actor == 'dependabot[bot]' || github.actor == 'dependabot-preview[bot]'
with:
github-token: "${{ secrets.GITHUB_TOKEN }}"