[ACS-10175] Add issues to permissions

.github/workflows/notify-on-an-bdu-label.yml

@@ -7,18 +7,48 @@ on:
 
 permissions:
   pull-requests: read
+  issues: read
 
 jobs:
   notify-bdu:
     name: Notify Teams when A/N BDU label is added
     runs-on: ubuntu-latest
     timeout-minutes: 5
-    if: >-
-      github.event.action == 'labeled' &&
-      github.event.label.name == 'A/N BDU' &&
-      github.event.pull_request.state == 'open'
     steps:
+      - name: Check if label was added after PR creation (with time threshold)
+        id: check_label_timing
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const prCreatedAt = new Date('${{ github.event.pull_request.created_at }}');
+            
+            const timeline = await github.rest.issues.listEvents({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+            });
+            
+            const labelEvent = timeline.data.reverse().find(event => 
+              event.event === 'labeled' && 
+              event.label.name === 'A/N BDU'
+            );
+            
+            if (!labelEvent) {
+              core.setOutput('should_notify', 'false');
+              return;
+            }
+            
+            const labelAddedAt = new Date(labelEvent.created_at);
+            const timeDiffSeconds = (labelAddedAt - prCreatedAt) / 1000;
+            
+            if (timeDiffSeconds > 0) {
+              core.setOutput('should_notify', 'true');
+            } else {
+              core.setOutput('should_notify', 'false');
+            }
+
       - name: Send Teams notification
+        if: steps.check_label_timing.outputs.should_notify == 'true'
         uses: Alfresco/alfresco-build-tools/.github/actions/send-teams-notification@1d671f8f10336861c89c67be57c6648d98876103 # v18.19.0
         with:
           webhook-url: ${{ secrets.TEAMS_NOTIFICATION_ADF_BDU_WEBHOOK }}