From 066acb967487a9cde3b380d98a5139dce247f554 Mon Sep 17 00:00:00 2001
From: north-echo <noreply@north-echo.dev>
Date: Mon, 8 Jun 2026 15:14:06 -0400
Subject: [PATCH] Remove disabled actions-cool/issues-helper workflows

These workflows have been failing on every scheduled run since GitHub
disabled actions-cool/issues-helper following the May 2026 TeamPCP /
Mini Shai-Hulud supply-chain campaign. The pinned ref (@v3 (tag, retargeted)) is
itself attacker-controlled.

Each file contained only the actions-cool/issues-helper step, so
deleting them loses no other logic. If issue-lifecycle automation is
desired, actions/github-script with inline JS is a drop-in alternative.

Refs #66
---
 .github/workflows/issue-close-inactive.yml  | 20 -------------------
 .github/workflows/issue-find-inactive.yml   | 21 --------------------
 .github/workflows/issue-labeled.yml         | 22 ---------------------
 .github/workflows/issue-remove-inactive.yml | 22 ---------------------
 4 files changed, 85 deletions(-)
 delete mode 100644 .github/workflows/issue-close-inactive.yml
 delete mode 100644 .github/workflows/issue-find-inactive.yml
 delete mode 100644 .github/workflows/issue-labeled.yml
 delete mode 100644 .github/workflows/issue-remove-inactive.yml

diff --git a/.github/workflows/issue-close-inactive.yml b/.github/workflows/issue-close-inactive.yml
deleted file mode 100644
index f9b2829..0000000
--- a/.github/workflows/issue-close-inactive.yml
+++ /dev/null
@@ -1,20 +0,0 @@
----
-# https://github.com/marketplace/actions/issues-helper
-name: Check and close inactive
-
-on:
-  schedule:
-    - cron: "0 6 * * *"
-
-jobs:
-  close-inactive-issues:
-    runs-on: ubuntu-latest
-    steps:
-      - name: close-issues
-        uses: actions-cool/issues-helper@v3
-        with:
-          actions: 'close-issues'
-          token: ${{ secrets.GITHUB_TOKEN }}
-          labels: 'inactive'
-          inactive-day: 7
-...
diff --git a/.github/workflows/issue-find-inactive.yml b/.github/workflows/issue-find-inactive.yml
deleted file mode 100644
index 34582a2..0000000
--- a/.github/workflows/issue-find-inactive.yml
+++ /dev/null
@@ -1,21 +0,0 @@
----
-# https://github.com/marketplace/actions/issues-helper
-name: Check inactive
-
-on:
-  schedule:
-    - cron: "0 5 * * *"
-
-jobs:
-  check-inactive:
-    runs-on: ubuntu-latest
-    steps:
-      - name: check-inactive
-        uses: actions-cool/issues-helper@v3
-        with:
-          actions: 'check-inactive'
-          token: ${{ secrets.GITHUB_TOKEN }}
-          inactive-day: 30
-          issue-state: open
-          exclude-labels: 'new,enhancement,backlog,help wanted,module-issue,blocked - upstream'
-...
diff --git a/.github/workflows/issue-labeled.yml b/.github/workflows/issue-labeled.yml
deleted file mode 100644
index 6eba1ae..0000000
--- a/.github/workflows/issue-labeled.yml
+++ /dev/null
@@ -1,22 +0,0 @@
----
-# https://github.com/marketplace/actions/issues-helper
-name: Issue Labeled
-
-on:
-  issues:
-    types: [labeled]
-
-jobs:
-  issue-labeled:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Create comment
-        uses: actions-cool/issues-helper@v3
-        if: github.event.label.name == 'inactive'  # || github.event.label.name == 'need info'
-        with:
-          actions: 'create-comment'
-          token: ${{ secrets.GITHUB_TOKEN }}
-          issue-number: ${{ github.event.issue.number }}
-          body: |
-            Hello @${{ github.event.issue.user.login }}. Please ensure that you have filled out the issue template as much as possible and have answered any further questions asked. If you have not done so in the next 7 days this issue will be automatically closed.'
-...
diff --git a/.github/workflows/issue-remove-inactive.yml b/.github/workflows/issue-remove-inactive.yml
deleted file mode 100644
index 29bd15c..0000000
--- a/.github/workflows/issue-remove-inactive.yml
+++ /dev/null
@@ -1,22 +0,0 @@
----
-# https://github.com/marketplace/actions/issues-helper
-name: Issue Remove Labels
-
-on:
-  issues:
-    types: [edited, reopened, labeled]
-  issue_comment:
-    types: [created, edited]
-
-jobs:
-  remove-inactive:
-    runs-on: ubuntu-latest
-    steps:
-      - name: remove inactive
-        if: github.event.issue.state == 'open' && github.event.issue.user != 'github-actions'
-        uses: actions-cool/issues-helper@v3
-        with:
-          actions: 'remove-labels'
-          issue-number: ${{ github.event.issue.number }}
-          labels: 'inactive'
-...