diff --git a/.github/workflows/f5-cla.yml b/.github/workflows/f5-cla.yml new file mode 100644 index 000000000..839ce3aee --- /dev/null +++ b/.github/workflows/f5-cla.yml @@ -0,0 +1,35 @@ +name: "F5 CLA Workflow" +on: + issue_comment: + types: [created] + pull_request_target: + types: [opened, closed, synchronize] + +permissions: + actions: write + contents: write + pull-requests: write + statuses: write + +jobs: + f5-cla: + runs-on: ubuntu-22.04 + steps: + - name: "F5 CLA Assistant" + if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have hereby read the F5 CLA and agree to its terms') || github.event_name == 'pull_request_target' + uses: contributor-assistant/github-action@v2.3.0 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + PERSONAL_ACCESS_TOKEN: ${{ secrets.F5_CLA_TOKEN }} + with: + path-to-signatures: 'signatures/beta/signatures.json' + path-to-document: 'https://github.com/f5/.github/blob/main/CLA/cla-markdown.md' + # Any pull request targeting the following branch will trigger a CLA check + branch: 'main' + custom-pr-sign-comment: 'I have hereby read the F5 CLA and agree to its terms' + custom-notsigned-prcomment: '🎉 Thank you for your contribution. It appears you have not yet signed the F5 Contributor License Agreement, which is required for your changes to be incorporated into an F5 project. Please kindly read the [F5 CLA](https://github.com/f5/.github/blob/main/CLA/cla-markdown.md) and comment the following to agree:' + custom-allsigned-prcomment: 'All required contributors have signed the F5 CLA for this PR ✅' + remote-organization-name: 'f5' + remote-repository-name: 'f5-cla-data' + # Comma seperated list of usernames for maintainers or any other individuals who should not be prompted for a CLA. + allowlist: oxpa, alessfg, bot* diff --git a/CHANGELOG.md b/CHANGELOG.md index 4efc5387c..e690307bb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -21,6 +21,7 @@ CI/CD: - Add Molecule tests for NGINX Amplify. - Update the RHEL based tests to use the latest UBI release. - Use the local role name (`ansible-role-nginx`) instead of the fully qualified role name (`nginxinc.nginx`) in Molecule to ensure tests always work as intended in environments where the role has been already installed beforehand. +- Implement F5 CLA signatures. ## 0.24.2 (October 3rd, 2023)