Review Snapshot and Timestamp #4995

	#
	# Copyright 2022 The Sigstore Authors.
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.

	name: Review Snapshot and Timestamp

	permissions: read-all

	on:
	# Enable cron for checking if a snapshot/timestamp PR needs review
	# every 2 hours and attempts to merge.
	schedule:
	- cron: '30 /2 * *' # every 2 hours
	workflow_dispatch:

	jobs:
	review:
	runs-on: ubuntu-latest
	permissions:
	pull-requests: 'write'
	contents: 'write'
	env:
	GITHUB_TOKEN: ${{ secrets.SIGSTORE_REVIEW_BOT_FINE_GRAINED_PAT }}
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- run: \|
	set -euo pipefail
	./.github/workflows/scripts/review-pull-request.sh

Provide feedback