mirror of
https://github.com/nginx/nginx.git
synced 2026-05-13 17:46:53 +00:00
9e7f0f4c53
There are some scenarios where the F5 CLA workflow should not run. This commit adds the ability to skip the F5 CLA by using the "skip-cla" label.
77 lines
3.8 KiB
YAML
77 lines
3.8 KiB
YAML
---
|
|
name: F5 Contributor License Agreement (CLA)
|
|
on:
|
|
issue_comment:
|
|
types: [created]
|
|
pull_request_target:
|
|
types: [opened, synchronize, closed, labeled, unlabeled]
|
|
permissions: read-all
|
|
jobs:
|
|
f5-cla:
|
|
name: F5 Contributor License Agreement (CLA)
|
|
runs-on: ubuntu-24.04
|
|
permissions:
|
|
actions: write
|
|
contents: read
|
|
pull-requests: write
|
|
statuses: write
|
|
steps:
|
|
- name: Check if F5 CLA should be skipped
|
|
id: skip-cla
|
|
if: |
|
|
(github.repository == 'nginx/nginx' || github.repository == 'nginx/nginx-tests' || github.repository == 'nginx/nginx.org') &&
|
|
(contains(toJSON(github.event.pull_request.labels.*.name), '"skip-cla"') ||
|
|
contains(toJSON(github.event.issue.labels.*.name), '"skip-cla"'))
|
|
run: echo "skip=true" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Run F5 CLA assistant
|
|
if: |
|
|
steps.skip-cla.outputs.skip != 'true' &&
|
|
(github.event_name == 'pull_request_target' ||
|
|
github.event.comment.body == 'recheck' ||
|
|
github.event.comment.body == 'I have hereby read the F5 CLA and agree to its terms')
|
|
uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
|
|
with:
|
|
# Path to the CLA document.
|
|
path-to-document: https://github.com/f5/f5-cla/blob/main/docs/f5_cla.md
|
|
# Custom CLA messages.
|
|
custom-notsigned-prcomment: '🎉 Thank you for your contribution! It appears you have not yet signed the [F5 Contributor License Agreement (CLA)](https://github.com/f5/f5-cla/blob/main/docs/f5_cla.md), which is required for your changes to be incorporated into an F5 Open Source Software (OSS) project. Please kindly read the [F5 CLA](https://github.com/f5/f5-cla/blob/main/docs/f5_cla.md) and reply on a new comment with the following text to agree:'
|
|
custom-pr-sign-comment: 'I have hereby read the F5 CLA and agree to its terms'
|
|
custom-allsigned-prcomment: '✅ All required contributors have signed the F5 CLA for this PR. Thank you!'
|
|
# Remote repository storing CLA signatures.
|
|
remote-organization-name: f5
|
|
remote-repository-name: f5-cla-data
|
|
# Branch where CLA signatures are stored.
|
|
branch: main
|
|
path-to-signatures: signatures/signatures.json
|
|
# Comma separated list of usernames for maintainers or any other individuals who should not be prompted for a CLA.
|
|
# NOTE: You will want to edit the usernames to suit your project needs.
|
|
allowlist: Copilot,dependabot[bot],renovate[bot],nginx-bot
|
|
# Do not lock PRs after a merge.
|
|
lock-pullrequest-aftermerge: false
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
PERSONAL_ACCESS_TOKEN: ${{ secrets.F5_CLA_TOKEN }}
|
|
|
|
- name: Leave a note in the PR if the F5 CLA is not required
|
|
if: |
|
|
steps.skip-cla.outputs.skip == 'true' &&
|
|
(github.event.action == 'labeled' || github.event.action == 'opened')
|
|
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
|
|
with:
|
|
script: |
|
|
const number = context.payload.pull_request?.number || context.payload.issue?.number;
|
|
if (!number) return;
|
|
const body = '✅ The F5 CLA is not required for this PR.\n<sub>Posted by the **CLA Assistant Lite bot**.</sub>';
|
|
const { data: comments } = await github.rest.issues.listComments({
|
|
owner: context.repo.owner,
|
|
repo: context.repo.repo,
|
|
issue_number: number,
|
|
});
|
|
if (comments.some(c => c.body === body)) return;
|
|
await github.rest.issues.createComment({
|
|
owner: context.repo.owner,
|
|
repo: context.repo.repo,
|
|
issue_number: number,
|
|
body,
|
|
});
|