lock.yaml

# This file is part of Dependency-Track.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# SPDX-License-Identifier: Apache-2.0
# Copyright (c) OWASP Foundation. All Rights Reserved.
name: Lock Threads

on:
  schedule:
    - cron: '0 10 * * *'

permissions: { }

jobs:
  action:
    runs-on: ubuntu-latest
    permissions:
      issues: write # Required to lock issues
      pull-requests: write # Required to lock PRs
    # don't run on forks
    if: ${{ contains(github.repository, 'DependencyTrack/') }}
    steps:
      - uses: dessant/lock-threads@v5
        with:
          github-token: ${{ github.token }}
          issue-inactive-days: '30'
          exclude-issue-created-before: ''
          exclude-any-issue-labels: ''
          add-issue-labels: ''
          issue-comment: 'This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.'
          issue-lock-reason: 'resolved'
          pr-inactive-days: '30'
          exclude-pr-created-before: ''
          exclude-any-pr-labels: ''
          add-pr-labels: ''
          pr-comment: ''
          pr-lock-reason: 'resolved'
          process-only: ''