.github/workflows/dismiss_approvals.yml

name: Dismiss Stale PR Approvals
on:
  pull_request_target:
    types: [opened, synchronize, reopened]
    branches:
      - main

jobs:
  dismiss_approvals:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
        with:
          egress-policy: audit

      - name: Run BCR PR Reviewer
        uses: bazelbuild/continuous-integration/actions/bcr-pr-reviewer@0c159455cb33ed35cabe04de77dd6ed8d0b70c7d # master
        with:
          # This token needs to be updated annually on Feb 05.
          token: ${{ secrets.BCR_PR_REVIEW_HELPER_TOKEN }}
          action-type: dismiss_approvals