update-session-issues.yml

name: Update Session Issues

on:
  # This schedule should match the time rotation configured on
  # update-design-review-issues.js.
  # Times correspond to session end, and additionally 1 hour earlier to account
  # for Daylight Savings.
  schedule:
    - cron: '30 16,17 * * 3' # Africa/Europe/western Asia
    - cron: '0 21,22 * * 3' # Americas

permissions:
  contents: read

jobs:
  update-session-issues:
    permissions:
      issues: write
    if: github.repository == 'ampproject/amphtml'
    name: Update Session Issues
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

      - name: Checkout Repo
        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
      - name: Update Session Issues
        run: |
          node ./build-system/common/update-session-issues
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}