Skip to content

Use shared PR author and stale workflows - #63

Merged
Ed Fricker (beastawakens) merged 1 commit into
mainfrom
automation/central-pr-workflows
Oct 23, 2026
Merged

Ed Fricker (beastawakens) merged 1 commit into
mainfrom
automation/central-pr-workflows

Conversation

@beastawakens

@beastawakens Ed Fricker (beastawakens) commented Oct 23, 2026 •

Copy link
Copy Markdown
Member

User description

Assign PR authors and flag inactive PRs consistently across active repositories.

Calls the shared workflows in central-workflows at v1. PRs receive a stale label after 14 inactive days. Issues are excluded and nothing is closed automatically.

Validation: the distributor checked the caller diff for whitespace errors. Check this repository's Actions runs after merging; this PR does not prove the workflows have run here.


PR Type

Other


Description

  • Add PR author auto-assign workflow via shared central-workflows

  • Add daily scheduled stale PR flagging workflow

  • Both reference reusable workflows pinned to v1

  • Scoped permissions: pull-requests (and issues) write


Diagram Walkthrough

flowchart LR
  prEvent["PR opened/reopened (pull_request_target)"]
  assignCaller["auto-author-assign.yml caller"]
  assignShared["central-workflows auto-author-assign.yml@v1"]
  schedule["Daily cron 16:30 UTC / manual dispatch"]
  staleCaller["stale.yml caller"]
  staleShared["central-workflows stale.yml@v1"]
  prEvent -- "triggers" --> assignCaller
  assignCaller -- "uses" --> assignShared
  schedule -- "triggers" --> staleCaller
  staleCaller -- "uses" --> staleShared
Loading

File Walkthrough

Relevant files
Configuration changes
auto-author-assign.yml
Add caller workflow for automatic PR author assignment     

.github/workflows/auto-author-assign.yml

  • New workflow triggered on pull_request_target for opened and reopened
    events
  • Grants only pull-requests: write permission
  • Delegates to reusable
    smileidentity/central-workflows/.github/workflows/auto-author-assign.yml@v1
+12/-0   
stale.yml
Add scheduled caller workflow to flag stale PRs                   

.github/workflows/stale.yml

  • New workflow scheduled daily at 30 16 * * * with workflow_dispatch
    support
  • Grants issues: write and pull-requests: write permissions
  • Delegates to reusable
    smileidentity/central-workflows/.github/workflows/stale.yml@v1
+14/-0   


Need help?
  • Type /help how to ... in the comments thread for any questions about PR-Agent usage.
  • Check out the documentation for more information.
  • @prfectionist

    prfectionist Bot commented Oct 23, 2026

    Copy link
    Copy Markdown

    PR Reviewer Guide 🔍

    Here are some key observations to aid the review process:

    ⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪
    🏅 Score: 92
    🧪 No relevant tests
    🔒 No security concerns identified
    🔀 No multiple PR themes
    ⚡ No major issues detected

    Comment on lines +10 to +12
    jobs:
    assign:
    uses: smileidentity/central-workflows/.github/workflows/auto-author-assign.yml@v1

    Copy link
    Copy Markdown

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Suggestion: This job runs on pull_request_target with pull-requests: write, and it uses the mutable @v1 tag. Anyone who can move or re-push that tag in central-workflows can change the code that runs here, including on PRs from forks, without a change to this repo. Pin the reusable workflow to a full commit SHA, keep the tag in a comment, and let Dependabot or Renovate update it; do the same in stale.yml. Replace <full-40-char-commit-sha-of-v1> with the SHA that v1 points to now. [security, importance: 5]

    Suggested change
    jobs:
    assign:
    uses: smileidentity/central-workflows/.github/workflows/auto-author-assign.yml@v1
    jobs:
    assign:
    # Pinned to the commit for v1; update via Dependabot/Renovate
    uses: smileidentity/central-workflows/.github/workflows/auto-author-assign.yml@<full-40-char-commit-sha-of-v1> # v1

    @beastawakens
    Ed Fricker (beastawakens) merged commit c9eaa6a into main Oct 23, 2026
    2 checks passed
    @beastawakens
    Ed Fricker (beastawakens) deleted the automation/central-pr-workflows branch October 23, 2026 08:02
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    1 participant