mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-28 12:49:03 +00:00
Anso
b9ada7f50b
The contributor-assistant action defaults to locking merged PRs to "safeguard CLA signatures", but signatures are stored in signatures/version1/cla.json and need no extra protection. The auto-lock fires within seconds of merge and blocks release-please from posting its "included in vX.Y.Z" comment on the merged release PR, failing the release-please workflow on every release (0.67.1, 0.68.0).
34 lines
1.4 KiB
YAML
34 lines
1.4 KiB
YAML
name: "CLA Assistant"
|
|
on:
|
|
issue_comment:
|
|
types: [created]
|
|
pull_request_target:
|
|
types: [opened,closed,synchronize]
|
|
|
|
permissions:
|
|
actions: write
|
|
contents: write
|
|
pull-requests: write
|
|
statuses: write
|
|
|
|
jobs:
|
|
CLAAssistant:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: "CLA Assistant"
|
|
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
|
|
uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
# The below token is optional but recommended if the CLA signatures should be stored in a private repository or you want to trigger other workflows
|
|
# PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
|
|
with:
|
|
path-to-signatures: 'signatures/version1/cla.json'
|
|
path-to-document: 'https://github.com/studio-saelix/sencho/blob/main/CLA.md'
|
|
branch: 'main'
|
|
allowlist: 'AnsoCode,dependabot[bot],greenkeeper[bot],github-actions[bot],release-please[bot],sencho-quartermaster[bot]'
|
|
# Default true locks merged PR conversations, which blocks
|
|
# release-please from commenting "included in vX.Y.Z" on the
|
|
# release PR. Signatures live in signatures/version1/cla.json.
|
|
lock-pullrequest-aftermerge: false
|