labels.yml

name: Labels

on:
  workflow_dispatch:
    inputs:
      source:
        description: 'The source repository to sync labels from'
        required: true
      targets:
        description: 'The target repositories to sync labels to (comma-separated)'
        required: true
      add:
        description: 'Whether to add labels to the target repositories'
        required: false
        default: true
      remove:
        description: 'Whether to remove labels from the target repositories'
        required: false
        default: false

defaults:
  run:
    shell: bash

jobs:
  sync:
    permissions:
      contents: read
    name: Sync
    runs-on: ubuntu-latest
    environment: write
    env:
      GITHUB_APP_ID: ${{ secrets.RW_GITHUB_APP_ID }}
      GITHUB_APP_INSTALLATION_ID: ${{ secrets[format('RW_GITHUB_APP_INSTALLATION_ID_{0}', github.repository_owner)] || secrets.RW_GITHUB_APP_INSTALLATION_ID }}
      GITHUB_APP_PEM_FILE: ${{ secrets.RW_GITHUB_APP_PEM_FILE }}
      TF_WORKSPACE: ${{ github.repository_owner }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Install pnpm
        uses: pnpm/action-setup@91ab88e2619ed1f46221f0ba42d1492c02baf788 # v6.0.6
        with:
          version: 10
      - name: Use Node.js lts/*
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: lts/*
          cache: ''
      - name: Initialize scripts
        run: pnpm install --frozen-lockfile && pnpm run build
        working-directory: scripts
      - name: Sync
        run: node lib/actions/sync-labels.js
        working-directory: scripts
        env:
          SOURCE_REPOSITORY: ${{ github.event.inputs.source }}
          TARGET_REPOSITORIES: ${{ github.event.inputs.targets }}
          ADD_LABELS: ${{ github.event.inputs.add }}
          REMOVE_LABELS: ${{ github.event.inputs.remove }}