refactor: 🔨 switch to using uvx for dev tooling, uv run isn't needed
#282
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Add to project board | |
| on: | |
| issues: | |
| types: | |
| - opened | |
| - reopened | |
| - transferred | |
| pull_request: | |
| types: | |
| - reopened | |
| - opened | |
| # Limit token permissions for security | |
| permissions: read-all | |
| env: | |
| BOARD_NUMBER: "24" | |
| jobs: | |
| add-to-project: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| # This is a useful security step to check for unexpected outbound calls from the runner, | |
| # which could indicate a compromised token or runner. | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| egress-policy: audit | |
| # Using this security pattern for GitHub Apps is recommended by GitHub and ensures that | |
| # the token is only available for a short time and has limited permissions. Check out | |
| # <https://guidebook.seedcase-project.org/operations/security> for more details. | |
| - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 | |
| id: app-token | |
| with: | |
| client-id: ${{ vars.ADD_TO_BOARD_APP_ID }} | |
| private-key: ${{ secrets.ADD_TO_BOARD }} | |
| - name: Add issue or PR to project board | |
| uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2 | |
| with: | |
| project-url: "https://github.com/orgs/${{ github.repository_owner }}/projects/${{ env.BOARD_NUMBER }}" | |
| github-token: ${{ steps.app-token.outputs.token }} | |
| - name: Assign PR to creator | |
| if: ${{ github.event_name == 'pull_request' }} | |
| run: | | |
| gh pr edit $PR --add-assignee $AUTHOR --repo $REPO | |
| env: | |
| REPO: ${{ github.repository }} | |
| AUTHOR: ${{ github.event.pull_request.user.login }} | |
| PR: ${{ github.event.pull_request.html_url }} | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} |