# Security Guidelines All public actions and content follow these security and privacy principles: - Two-Factor Authentication (2FA) enabled - Strong, unique passwords with password manager - Sensitive info hidden (email, phone, address, ID) - Protected main branch and commit control - Regular audit of forks, clones, and commit history #28534
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Close issue/PR on adding invalid label | |
| # **What it does**: This action closes invalid pull requests in the open-source repository. | |
| # **Why we have it**: We get lots of spam in the open-source repository. | |
| # **Who does it impact**: Open-source contributors. | |
| on: | |
| issues: | |
| types: [labeled] | |
| # Needed in lieu of `pull_request` so that PRs from a fork can be | |
| # closed when marked as invalid. | |
| pull_request_target: | |
| types: [labeled] | |
| permissions: | |
| contents: read | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| close-on-adding-invalid-label: | |
| if: github.repository == 'github/docs' && github.event.label.name == 'invalid' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Close issue | |
| if: ${{ github.event_name == 'issues' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: gh issue close ${{ github.event.issue.html_url }} | |
| - name: Close PR | |
| if: ${{ github.event_name == 'pull_request_target' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: gh pr close ${{ github.event.pull_request.html_url }} | |
| - name: Check out repo | |
| if: ${{ failure() && github.event_name != 'pull_request_target' }} | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| - uses: ./.github/actions/slack-alert | |
| if: ${{ failure() && github.event_name != 'pull_request_target' }} | |
| with: | |
| slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }} | |
| slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }} |