label-sync.yaml

---
  name: Label Sync

  on:
    workflow_dispatch:
    push:
      branches: ["main"]
      paths: [".github/labels.yaml"]

  jobs:
    labels:
      name: Sync Labels
      runs-on: ubuntu-latest
      steps:
        - name: Generate Token
          uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1.11.1
          id: app-token
          with:
            app-id: "${{ secrets.BOT_APP_ID }}"
            private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

        - name: Checkout
          uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
          with:
            token: "${{ steps.app-token.outputs.token }}"

        - name: Sync Labels
          uses: EndBug/label-sync@52074158190acb45f3077f9099fea818aa43f97a # v2.3.3
          with:
            config-file: .github/labels.yaml
            token: "${{ steps.app-token.outputs.token }}"
            delete-other-labels: true