label_reconciler.yaml

name: "Audit Labels"

on: # yamllint disable-line rule:truthy
  workflow_dispatch:
  pull_request:
    branches:
      - main
    types:
      - closed
jobs:
  label-linter:
    name: Audit Labels
    permissions:
      contents: read
      pull-requests: write
    runs-on: ubuntu-latest
    if: github.event.pull_request.merged == true
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          sparse-checkout: .github/allowed-labels.yaml
          sparse-checkout-cone-mode: false

      # The Reconcile Labels workflow creates, renames, updates
      # or deletes labels based on a list of allowed labels.
      - name: Reconcile Labels
        if: success()
        uses: crazy-max/ghaction-github-labeler@v4
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          yaml-file: .github/allowed-labels.yaml
          skip-delete: true
          dry-run: false