name: labeler # Thin caller that runs the org-wide reusable PR labeler # (Sea-Haven-Industries/.github :: callable-labeler.yaml) on this repo's PRs. # # Permissions are load-bearing: callers MUST grant all three below. Reusable- # workflow permissions can only be downgraded from the caller, so omitting one # (e.g. issues:write) either fails to create labels or triggers a silent # startup_failure. `pull_request` (NOT pull_request_target) is correct here — # the org takes no fork PRs, so the lower-privilege event is sufficient. on: pull_request: permissions: contents: read pull-requests: write issues: write jobs: label: uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@main