Refactor GitHub Actions workflow for issue labeling

Author: rahulharpal1603

.github/workflows/linked-issue.yml

@@ -1,14 +1,10 @@
 name: Sync Issue Labels to PR
-
 on:
   pull_request_target:
     types: [opened, reopened, synchronize, edited]
-
 permissions:
-  contents: write
-  issues: write
+  contents: read
   pull-requests: write
-
 jobs:
   sync-labels:
     runs-on: ubuntu-latest
@@ -18,39 +14,35 @@ jobs:
 
       - name: Extract linked issues from PR body
         id: issues
+        env:
+          PR_BODY: ${{ github.event.pull_request.body }}
         run: |
-          BODY=$(printf '%s' "${{ github.event.pull_request.body }}")
-
-          ISSUES=$(echo "$BODY" | grep -oE '#[0-9]+' || true)
-          ISSUES=$(echo "$ISSUES" | tr -d '#' | tr '\n' ' ')
-
+          ISSUES=$(echo "$PR_BODY" | grep -oE '#[0-9]+' | tr -d '#' | tr '\n' ' ' || true)
           echo "issues=$ISSUES" >> $GITHUB_OUTPUT
 
       - name: Collect labels from linked issues
         if: ${{ steps.issues.outputs.issues != '' }}
         id: labels
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ISSUE_NUMBERS: ${{ steps.issues.outputs.issues }}
+          REPO: ${{ github.repository }}
         run: |
           ALL_LABELS=""
           REAL_ISSUES=""
-
-          for ISSUE_NUM in ${{ steps.issues.outputs.issues }}; do
-            IS_PR=$(gh api repos/${{ github.repository }}/issues/$ISSUE_NUM --jq '.pull_request // empty' || echo "")
+          for ISSUE_NUM in $ISSUE_NUMBERS; do
+            IS_PR=$(gh api "repos/$REPO/issues/$ISSUE_NUM" --jq '.pull_request // empty' || echo "")
             if [ -n "$IS_PR" ]; then
               echo "#$ISSUE_NUM is a PR, skipping"
               continue
             fi
-
             REAL_ISSUES="$REAL_ISSUES $ISSUE_NUM"
-            LABELS=$(gh issue view $ISSUE_NUM --json labels -q '.labels[].name' || echo "")
+            LABELS=$(gh issue view "$ISSUE_NUM" --json labels -q '.labels[].name' || echo "")
             if [ -n "$LABELS" ]; then
               ALL_LABELS="$ALL_LABELS"$'\n'"$LABELS"
             fi
           done
-
           ALL_LABELS=$(echo "$ALL_LABELS" | sed '/^$/d' | sort -u | paste -sd, - || true)
-
           echo "real_issues=$REAL_ISSUES" >> $GITHUB_OUTPUT
           echo "labels=$ALL_LABELS" >> $GITHUB_OUTPUT
 
@@ -60,13 +52,15 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PR_NUM: ${{ github.event.pull_request.number }}
         run: |
-          gh pr comment $PR_NUM --body "⚠️ No issue was linked in the PR description.
+          gh pr comment "$PR_NUM" --body "⚠️ No issue was linked in the PR description.
           Please make sure to link an issue (e.g., 'Fixes #issue_number')"
 
       - name: Apply labels to PR
         if: ${{ steps.labels.outputs.labels != '' }}
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          LABELS_TO_APPLY: ${{ steps.labels.outputs.labels }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
         run: |
-          echo "Applying labels: ${{ steps.labels.outputs.labels }}"
-          gh pr edit ${{ github.event.pull_request.number }} --add-label "${{ steps.labels.outputs.labels }}"
+          echo "Applying labels: $LABELS_TO_APPLY"
+          gh pr edit "$PR_NUMBER" --add-label "$LABELS_TO_APPLY"