ci: Update CLA workflow to grant write permissions for contents and remove internal comments.
This commit is contained in:
6
.github/workflows/cla.yml
vendored
6
.github/workflows/cla.yml
vendored
@@ -9,15 +9,13 @@ on:
|
|||||||
# Permissions needed for the workflow
|
# Permissions needed for the workflow
|
||||||
permissions:
|
permissions:
|
||||||
actions: write
|
actions: write
|
||||||
contents: read
|
contents: write
|
||||||
pull-requests: write
|
pull-requests: write
|
||||||
statuses: write
|
statuses: write
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
cla-check:
|
cla-check:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
# OPTIMIZATION: This logic is moved here.
|
|
||||||
# The job will only start if it's a PR update, OR a comment on a PR containing the magic words.
|
|
||||||
if: >
|
if: >
|
||||||
github.event_name == 'pull_request_target' ||
|
github.event_name == 'pull_request_target' ||
|
||||||
(
|
(
|
||||||
@@ -33,10 +31,8 @@ jobs:
|
|||||||
uses: cla-assistant/github-action@v2.5.0
|
uses: cla-assistant/github-action@v2.5.0
|
||||||
env:
|
env:
|
||||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
# Ensure this secret is set in your repo settings!
|
|
||||||
PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ASSISTANT_TOKEN }}
|
PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ASSISTANT_TOKEN }}
|
||||||
with:
|
with:
|
||||||
# Path to the CLA document(s)
|
|
||||||
path-to-signatures: 'signatures/cla.json'
|
path-to-signatures: 'signatures/cla.json'
|
||||||
path-to-document: 'https://github.com/${{ github.repository }}/blob/main/ICLA.md'
|
path-to-document: 'https://github.com/${{ github.repository }}/blob/main/ICLA.md'
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user