name: Dismiss Stale PR Approvals
on:
  pull_request_target:
    types: [opened, synchronize, reopened]
    branches:
      - main

jobs:
  dismiss_approvals:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
        with:
          egress-policy: audit

      - name: Run BCR PR Reviewer
        uses: bazelbuild/continuous-integration/actions/bcr-pr-reviewer@b1056241859cba5c27844c2d7e8d39e61d6715f3 # master
        with:
          # This token needs to be updated annually on Feb 05.
          token: ${{ secrets.BCR_PR_REVIEW_HELPER_TOKEN }}
          action-type: dismiss_approvals
