Skip to content

chore: add stale workflow for issues and PRs - #171

Merged
marandaneto merged 2 commits into
mainfrom
chore/add-stale-issues-and-prs-workflow
Apr 13, 2026
Merged

chore: add stale workflow for issues and PRs#171
marandaneto merged 2 commits into
mainfrom
chore/add-stale-issues-and-prs-workflow

Conversation

@marandaneto

Copy link
Copy Markdown
Member

Summary

Add the stale workflow used in posthog-js so this repo automatically manages stale issues and PRs too.

Testing

Reviewed the workflow YAML and verified it configures actions/stale@v10 for both issues and PRs.

@marandaneto
marandaneto requested a review from a team April 13, 2026 09:03
@marandaneto
marandaneto requested a review from haacked as a code owner April 13, 2026 09:03
@github-actions

github-actions Bot commented Apr 13, 2026

Copy link
Copy Markdown
Contributor

posthog-dotnet Compliance Report

Date: 2026-04-13 09:21:12 UTC
Duration: 172ms

✅ All Tests Passed!

0/0 tests passed


@greptile-apps

greptile-apps Bot commented Apr 13, 2026

Copy link
Copy Markdown
Contributor

Security Review

  • Overly broad workflow permission in .github/workflows/stale.yaml: actions: write grants the ability to cancel/delete workflow runs and manage artifacts, which actions/stale@v10 does not need. Only issues: write and pull-requests: write are required. Removing actions: write reduces the attack surface if the action or its supply chain were ever compromised.
Prompt To Fix All With AI
This is a comment left during a code review.
Path: .github/workflows/stale.yaml
Line: 8

Comment:
**Unnecessary `actions: write` permission**

`actions/stale@v10` only requires `issues: write` and `pull-requests: write` to label, comment on, and close stale items. `actions: write` grants the workflow the ability to cancel runs, delete artifacts, and manage workflow permissions — none of which are needed here. Granting it violates the principle of least privilege and expands the blast radius if the `actions/stale` action (or a dependency) were ever compromised.

```suggestion
    issues: write
    pull-requests: write
```

How can I resolve this? If you propose a fix, please make it concise.

Reviews (1): Last reviewed commit: "chore: add stale workflow for issues and..." | Re-trigger Greptile

Comment thread .github/workflows/stale.yaml Outdated
@marandaneto
marandaneto enabled auto-merge (squash) April 13, 2026 09:37
@marandaneto
marandaneto merged commit 2e7700d into main Apr 13, 2026
15 checks passed
@marandaneto
marandaneto deleted the chore/add-stale-issues-and-prs-workflow branch April 13, 2026 09:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants