Skip to content

fix(ci): make cla-check work for fork PRs #325

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ajianaz merged 3 commits into from
Sep 11, 2026
Merged

fix(ci): make cla-check work for fork PRs #325

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1d37aa3
fix(ci): make cla-check work for fork PRs
ajianaz Sep 11, 2026
25d8828
fix(ci): repair job-level bot-exclusion expression quoting
ajianaz Sep 11, 2026
f0089a6
Merge branch 'develop' into fix/cla-check-fork-safe
ajianaz Sep 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 6 additions & 23 deletions .github/workflows/cla-check.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@ on:
permissions:
pull-requests: write
contents: read
statuses: write

jobs:
cla-check:
runs-on: ubuntu-latest
if: "!contains(fromJSON('[\"dependabot[bot]\", \"renovate[bot]\", \"github-actions[bot]\", \"app/dependabot\", \"app/renovate\"]'), github.event.pull_request.user.login)"
steps:
- name: Fetch & check CLA signature
id: check
Expand Down Expand Up @@ -45,9 +45,10 @@ jobs:
env:
PR_AUTHOR: ${{ github.event.pull_request.user.login }}

- name: Comment on PR (unsigned only)
if: steps.check.outputs.signed != 'true'
uses: actions/github-script@v7
- name: Comment on PR (same-repo, best effort)
if: steps.check.outputs.signed != 'true' && github.event.pull_request.head.repo.full_name == github.repository
continue-on-error: true
uses: actions/github-script@v9
with:
script: |
const author = '${{ github.event.pull_request.user.login }}';
Expand Down Expand Up @@ -95,27 +96,9 @@ jobs:
});
}

- name: Set commit status
uses: actions/github-script@v7
with:
script: |
const signed = '${{ steps.check.outputs.signed }}' === 'true';
await github.rest.repos.createCommitStatus({
owner: context.repo.owner,
repo: context.repo.repo,
sha: '${{ github.event.pull_request.head.sha }}',
state: signed ? 'success' : 'failure',
context: 'CLA Check',
description: signed
? '✅ CLA signed'
: '❌ CLA not signed — sign at https://codecoradev.github.io/cla',
target_url: signed
? 'https://github.com/codecoradev/.github/blob/main/.cla/signatures.json'
: 'https://codecoradev.github.io/cla',
});

- name: Fail if not signed
if: steps.check.outputs.signed != 'true'
run: |
echo "::error title=CLA not signed::Sign the CodeCoraDev CLA at https://codecoradev.github.io/cla — once the signature PR is merged, this check turns green automatically (re-run it or wait ~1 hour)."
echo "❌ CLA not signed by ${{ github.event.pull_request.user.login }}"
exit 1
Loading