Remove approval step from auto-merge workflow #82

	# SPDX-License-Identifier: Apache-2.0

	name: Lint GitHub Actions workflows
	on:
	push:
	branches:
	- "main"
	paths:
	- '.github/workflows/*.ya?ml'
	- '.github/actions/**/action.ya?ml'
	- '.github/zizmor.ya?ml'
	- '.poutine.ya?ml'
	pull_request:
	branches:
	- "main"
	paths:
	- '.github/workflows/*.ya?ml'
	- '.github/actions/**/action.ya?ml'
	- '.github/zizmor.ya?ml'
	- '.poutine.ya?ml'

	env:
	LC_ALL: en_US.UTF-8

	defaults:
	run:
	shell: bash

	permissions:
	contents: read

	jobs:
	actionlint:
	permissions:
	security-events: write # Required for upload-sarif to upload SARIF files.
	runs-on: ubuntu-latest
	steps:
	- name: "Harden Runner"
	uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
	with:
	egress-policy: block
	allowed-endpoints: >
	api.github.com:443
	ghcr.io:443
	github.com:443
	pkg-containers.githubusercontent.com:443

	- name: "Checkout"
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false

	- name: "Check workflow files with zizmor"
	uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7

	- name: "Check workflow files with poutine"
	uses: boostsecurityio/poutine-action@e240ebd3eff8b2db5a8e5f6b28f58739d7db2247 # v1.1.4
	with:
	output: ${{ runner.temp }}/poutine.sarif

	- name: "Upload poutine SARIF file"
	uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
	with:
	sarif_file: ${{ runner.temp }}/poutine.sarif
	category: poutine

Navigation Menu