1
0
mirror of https://github.com/huggingface/diffusers.git synced 2026-10-24 20:59:27 +03:00
Files
diffusers/.github/workflows/issue_labeler.yml
hf-security-analysis[bot] 256e9fbc0b Scope GITHUB_TOKEN permissions per job (#14852)
A job with no `permissions:` block inherits whatever the repository
hands out. Each block added here grants what that job's own steps
need and nothing more.

Co-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>
2026-09-23 14:39:08 +02:00

39 lines
1.1 KiB
YAML

name: Issue Labeler
on:
issues:
types: [opened]
permissions: {}
jobs:
label:
permissions:
contents: read
issues: write
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Install dependencies
run: pip install huggingface_hub
- name: Get labels from LLM
id: get-labels
env:
HF_TOKEN: ${{ secrets.ISSUE_LABELER_HF_TOKEN }}
ISSUE_TITLE: ${{ github.event.issue.title }}
ISSUE_BODY: ${{ github.event.issue.body }}
run: |
LABELS=$(python utils/label_issues.py)
echo "labels=$LABELS" >> "$GITHUB_OUTPUT"
- name: Apply labels
if: steps.get-labels.outputs.labels != ''
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
ISSUE_NUMBER: ${{ github.event.issue.number }}
LABELS: ${{ steps.get-labels.outputs.labels }}
run: |
for label in $(echo "$LABELS" | python -c "import json,sys; print('\n'.join(json.load(sys.stdin)))"); do
gh issue edit "$ISSUE_NUMBER" --add-label "$label"
done