name: Auto Close PR

on:
  pull_request_target:
    types:
      - opened

defaults:
  run:
    shell: bash

permissions: {}

jobs:
  auto-close-pr:
    if: >-
      !contains(fromJson('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)
      && github.event.pull_request.user.type != 'Bot'
    runs-on: ubuntu-slim
    timeout-minutes: 5
    permissions:
      pull-requests: write
      issues: read
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
          sparse-checkout: |
            .github
      - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        with:
          retries: 3
          script: |
            const script = require(
              `${process.env.GITHUB_WORKSPACE}/.github/workflows/auto-close-pr.js`
            );
            await script.main({ context, github });