Scan PRs Action

List open PRs across an organization and auto-merge eligible GitHub Actions update PRs.

Features

PR Overview: Lists all open PRs with age-based categorization (New, Green ≤7d, Yellow ≤30d, Red >30d)
Auto-merge: Automatically merges Dependabot and UltralyticsAssistant PRs that update GitHub Actions when no checks have failed
Console Logging: Detailed output showing which PRs were found, merged, or skipped with reasons

Usage

name: Scan PRs
on:
  workflow_dispatch:
  schedule:
    - cron: "0 3 * * *" # daily at 03:00 UTC

permissions:
  contents: write
  pull-requests: write

jobs:
  scan-prs:
    runs-on: ubuntu-latest
    steps:
      - uses: ultralytics/actions/scan-prs@main
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          org: ultralytics # Optional: defaults to ultralytics
          visibility: private,internal # Optional: public, private, internal, all, or comma-separated

Inputs

Input	Description	Required	Default
`token`	GitHub token with admin permissions for merging	Yes	-
`org`	GitHub organization name	No	`ultralytics`
`visibility`	Repository visibility to scan: `public`, `private`, `internal`, `all`, or comma-separated list (e.g., `private,internal`)	No	`public`

Security Note: If the calling repository is public, scanning is automatically restricted to public repos only, even if non-public visibilities are specified.

Auto-merge Criteria

GitHub Actions update PRs are automatically merged if they meet ALL criteria:

Authored by Dependabot or UltralyticsAssistant
Title contains bump and /.github/workflows (a GitHub Actions version bump)
Update at least one GitHub Actions file (in .github/workflows/, or an action.yml/action.yaml)
PR is mergeable (no conflicts)
No status checks in a failed state (FAILURE, ERROR, CANCELLED, TIMED_OUT, ACTION_REQUIRED, STARTUP_FAILURE); pending or absent checks do not block merging
Maximum 1 PR merged per repository per run

Output

The action generates a GitHub step summary with:

Total PR count across all repos
PR breakdown by phase (New, Green, Yellow, Red)
Detailed list of PRs per repository
Summary of GitHub Actions update PRs found, merged, and skipped