From 56a23bd97119aa4eb086295d6f1fc1996b81d526 Mon Sep 17 00:00:00 2001
From: Daniel James Smith <djsmith85@users.noreply.github.com>
Date: Thu, 18 Jun 2026 18:05:16 +0200
Subject: [PATCH 1/2] Create new workflow that calls the shared
 enforce-pr-labels-sdlc workflow on bitwarden/gh-actions

Stills block on 'needs-qa' and 'hold'
Additionally requires all PRs to have a single change type label (t:-prefix) applied
---
 .github/workflows/enforce-pr-labels-sdlc.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 .github/workflows/enforce-pr-labels-sdlc.yml

diff --git a/.github/workflows/enforce-pr-labels-sdlc.yml b/.github/workflows/enforce-pr-labels-sdlc.yml
new file mode 100644
index 000000000000..ed8bff3fde6b
--- /dev/null
+++ b/.github/workflows/enforce-pr-labels-sdlc.yml
@@ -0,0 +1,15 @@
+name: SDLC / Enforce PR labels
+run-name: Enforce labels for PR ${{ github.event.pull_request.number }}
+
+on:
+  pull_request:
+    types: [labeled, unlabeled, opened, reopened, edited, synchronize]
+
+permissions: {}
+
+jobs:
+  enforce-label:
+    name: Enforce Label
+    uses: bitwarden/gh-actions/.github/workflows/_enforce-pr-labels-sdlc.yml@main
+    permissions:
+      pull-requests: read
\ No newline at end of file

From ffdda50dd7b8668799a59531ce9a6c8664edb6e8 Mon Sep 17 00:00:00 2001
From: Daniel James Smith <djsmith85@users.noreply.github.com>
Date: Thu, 18 Jun 2026 18:05:32 +0200
Subject: [PATCH 2/2] Remove old enfore-labels workflow

---
 .github/workflows/enforce-labels.yml | 19 -------------------
 1 file changed, 19 deletions(-)
 delete mode 100644 .github/workflows/enforce-labels.yml

diff --git a/.github/workflows/enforce-labels.yml b/.github/workflows/enforce-labels.yml
deleted file mode 100644
index 12a771fd3c0b..000000000000
--- a/.github/workflows/enforce-labels.yml
+++ /dev/null
@@ -1,19 +0,0 @@
-name: Enforce PR labels
-
-on:
-  workflow_call:
-  pull_request:
-    types: [labeled, unlabeled, opened, edited, synchronize]
-permissions:
-  contents: read
-  pull-requests: read
-jobs:
-  enforce-label:
-    name: EnforceLabel
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Enforce Label
-        uses: yogevbd/enforce-label-action@a3c219da6b8fa73f6ba62b68ff09c469b3a1c024 # 2.2.2
-        with:
-          BANNED_LABELS: "hold,needs-qa"
-          BANNED_LABELS_DESCRIPTION: "PRs with the hold or needs-qa labels cannot be merged"