.github/workflows/dismiss_approvals.yml

name: Dismiss Stale PR Approvals
on:
  pull_request_target:
    types: [opened, synchronize, reopened]
    branches:
      - main

jobs:
  dismiss_approvals:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
        with:
          egress-policy: audit

      - name: Run BCR PR Reviewer
        uses: bazelbuild/continuous-integration/actions/bcr-pr-reviewer@b1056241859cba5c27844c2d7e8d39e61d6715f3 # master
        with:
          # This token needs to be updated annually on Feb 05.
          token: ${{ secrets.BCR_PR_REVIEW_HELPER_TOKEN }}
          action-type: dismiss_approvals