diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml new file mode 100644 index 0000000000..7e14c140d8 --- /dev/null +++ b/.github/workflows/cla.yaml @@ -0,0 +1,43 @@ +# Requires every contributor to have signed the Zipstack CLA, and records +# signatures posted as a PR comment. Replaces cla-assistant.io; it sets the same +# `license/cla` status that branch protection requires. +# See https://github.com/Zipstack/cla-action +# +# pull_request_target runs in the context of the base repository, so it gets +# secrets even for PRs from forks. That is safe here only because this workflow +# never checks out or runs the PR's code. Do not add a checkout step. +name: CLA + +on: + pull_request_target: + types: [opened, synchronize, reopened] + issue_comment: + types: [created] + +permissions: + pull-requests: write + statuses: write + +concurrency: + group: cla-${{ github.event.pull_request.number || github.event.issue.number }} + +jobs: + cla: + # Comments on issues (not PRs) never need a CLA check. + if: github.event_name == 'pull_request_target' || github.event.issue.pull_request + runs-on: ubuntu-latest + steps: + - name: Mint signatures token + id: app-token + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 + with: + client-id: ${{ vars.CLA_APP_CLIENT_ID }} + private-key: ${{ secrets.CLA_APP_PRIVATE_KEY }} + owner: Zipstack + repositories: cla-signatures + + - uses: Zipstack/cla-action@b68f7dda08f8e4d075b2c357609e20e5ef6f646e # v1.0.0 + with: + cla-document-url: https://gist.github.com/arun-venkataswamy/0dec44b8e5155c43461caf62c38ddac3 + signatures-repository: Zipstack/cla-signatures + signatures-token: ${{ steps.app-token.outputs.token }} diff --git a/README.md b/README.md index 9e282b3e10..8544270e4c 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ Uptime Status Docker Pulls Ask DeepWiki - CLA assistant + CLA required

Python Version from PEP 621 TOML