UN-4523 [MISC] Enforce the CLA with Zipstack/cla-action instead of cla-assistant.io

.github/workflows/cla.yaml

@@ -0,0 +1,43 @@
+# Requires every contributor to have signed the Zipstack CLA, and records
+# signatures posted as a PR comment. Replaces cla-assistant.io; it sets the same
+# `license/cla` status that branch protection requires.
+# See https://github.com/Zipstack/cla-action
+#
+# pull_request_target runs in the context of the base repository, so it gets
+# secrets even for PRs from forks. That is safe here only because this workflow
+# never checks out or runs the PR's code. Do not add a checkout step.
+name: CLA
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+  issue_comment:
+    types: [created]
+
+permissions:
+  pull-requests: write
+  statuses: write
+
+concurrency:
+  group: cla-${{ github.event.pull_request.number || github.event.issue.number }}
+
+jobs:
+  cla:
+    # Comments on issues (not PRs) never need a CLA check.
+    if: github.event_name == 'pull_request_target' || github.event.issue.pull_request
+    runs-on: ubuntu-latest
+    steps:
+      - name: Mint signatures token
+        id: app-token
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
+        with:
+          client-id: ${{ vars.CLA_APP_CLIENT_ID }}
+          private-key: ${{ secrets.CLA_APP_PRIVATE_KEY }}
+          owner: Zipstack
+          repositories: cla-signatures
+
+      - uses: Zipstack/cla-action@b68f7dda08f8e4d075b2c357609e20e5ef6f646e # v1.0.0
+        with:
+          cla-document-url: https://gist.github.com/arun-venkataswamy/0dec44b8e5155c43461caf62c38ddac3
+          signatures-repository: Zipstack/cla-signatures
+          signatures-token: ${{ steps.app-token.outputs.token }}

README.md

@@ -12,7 +12,7 @@
     <a href="https://status.unstract.com"><img src="https://img.shields.io/badge/uptime-status-brightgreen" alt="Uptime Status"></a>
     <a href="https://hub.docker.com/u/unstract"><img src="https://img.shields.io/docker/pulls/unstract/backend" alt="Docker Pulls"></a>
     <a href="https://deepwiki.com/Zipstack/unstract"><img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki"></a>
-    <a href="https://cla-assistant.io/Zipstack/unstract"><img src="https://cla-assistant.io/readme/badge/Zipstack/unstract" alt="CLA assistant"></a>
+    <a href="https://gist.github.com/arun-venkataswamy/0dec44b8e5155c43461caf62c38ddac3"><img src="https://img.shields.io/badge/CLA-required-blue" alt="CLA required"></a>
   </p>
   <p>
     <img src="https://img.shields.io/python/required-version-toml?tomlFilePath=https%3A%2F%2Fraw.githubusercontent.com%2FZipstack%2Funstract%2Frefs%2Fheads%2Fmain%2Fpyproject.toml" alt="Python Version from PEP 621 TOML">