From ea358e53df90af3178f52b45ea129676d303aad1 Mon Sep 17 00:00:00 2001
From: Patrik Oldsberg <poldsberg@gmail.com>
Date: Mon, 2 Feb 2026 16:20:45 +0100
Subject: [PATCH] workflows: add v2 PR automation workflow

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
---
 .github/workflows/sync_pull_requests.yml | 29 ++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 .github/workflows/sync_pull_requests.yml

diff --git a/.github/workflows/sync_pull_requests.yml b/.github/workflows/sync_pull_requests.yml
new file mode 100644
index 0000000000..647b7dbe93
--- /dev/null
+++ b/.github/workflows/sync_pull_requests.yml
@@ -0,0 +1,29 @@
+name: Sync Pull Requests
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened, labeled, unlabeled]
+  pull_request_review:
+    types: [submitted, dismissed]
+  issue_comment:
+    types: [created, edited]
+
+jobs:
+  label:
+    # prevent running towards forks and from bots
+    if: github.repository == 'backstage/backstage' && github.event.sender.type != 'Bot'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+        with:
+          egress-policy: audit
+
+      - name: Backstage PR automation
+        uses: backstage/actions/pr-automation@67179ab45898a95ba94a4b196131a3241d72a2a1 # v0.7.0
+        with:
+          app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }}
+          private-key: ${{ secrets.BACKSTAGE_GOALIE_PRIVATE_KEY }}
+          installation-id: ${{ secrets.BACKSTAGE_GOALIE_INSTALLATION_ID }}
+          project-owner: backstage
+          project-number: '14'