stale_pr.yml

name: "Close stale PRs"
on:
  schedule:
  - cron: "0 0 * * *"

permissions:
  contents: read

jobs:
  stale:
    permissions:
      pull-requests: write  # for actions/stale to close stale PRs
    runs-on: ubuntu-latest
    steps:
    - name: Harden Runner
      uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
      with:
        disable-sudo: true
        egress-policy: audit

    - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8.0.0
      with:
        stale-pr-message: 'This PR has been marked stale after 30 days with no activity. It will be closed in 5 days if there is no activity.'
        days-before-stale: 30
        days-before-close: 5
        days-before-issue-stale: -1 # disable issue checking
        days-before-issue-close: -1 # disable issue checking
        stale-pr-label: 'stale'
        exempt-pr-labels: 'on hold,in review'