From 421fbfa3e97d68e5c7abdc5153f562799b3ee34b Mon Sep 17 00:00:00 2001 From: Charlie Holland Date: Wed, 24 Jun 2026 17:15:24 +0100 Subject: [PATCH 1/2] ci: migrate CLA to in-repo contributor-assistant action Signed-off-by: Charlie Holland --- .github/workflows/cla.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/cla.yml diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml new file mode 100644 index 0000000..50e2896 --- /dev/null +++ b/.github/workflows/cla.yml @@ -0,0 +1,31 @@ +name: "CLA Assistant" + +on: + issue_comment: + types: [created] + pull_request_target: + types: [opened, closed, synchronize] + +permissions: + actions: write + contents: write + pull-requests: write + statuses: write + +jobs: + CLAAssistant: + runs-on: ubuntu-latest + steps: + - name: "CLA Assistant" + if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target' + uses: contributor-assistant/github-action@v2.6.1 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }} + with: + path-to-signatures: 'signatures/version1/cla.json' + path-to-document: 'https://gist.github.com/chaholl/acc8f1f6c38376d00a162351f566b93e' + remote-organization-name: 'AltairaLabs' + remote-repository-name: 'cla-signatures' + branch: 'main' + allowlist: 'dependabot[bot],*[bot]' From 3d4ac82855817a165a95f30a660bebe628fd471d Mon Sep 17 00:00:00 2001 From: Charlie Holland Date: Wed, 24 Jun 2026 17:31:20 +0100 Subject: [PATCH 2/2] ci: pin CLA action to commit SHA (v2.6.1) for supply-chain safety Signed-off-by: Charlie Holland --- .github/workflows/cla.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 50e2896..05e0f02 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -18,7 +18,7 @@ jobs: steps: - name: "CLA Assistant" if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target' - uses: contributor-assistant/github-action@v2.6.1 + uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}