cla.yml

name: CLA Assistant

on:
  issue_comment:
    types: [created]
  pull_request_target:
    types: [opened, closed, synchronize]

# The workflow never checks out or executes pull-request code. The signature
# assistant needs write access to record signatures and update the PR check.
permissions:
  actions: write
  contents: write
  pull-requests: write
  statuses: write

jobs:
  cla:
    name: CLA Assistant
    if: ${{ github.repository == 'wxy/appilot' }}
    runs-on: ubuntu-latest
    steps:
      - name: Verify contributor CLA
        if: |
          (
            github.event_name == 'pull_request_target' &&
            (
              github.event.action == 'opened' ||
              github.event.action == 'synchronize' ||
              (github.event.action == 'closed' && github.event.pull_request.merged == true)
            )
          ) ||
          (
            github.event_name == 'issue_comment' &&
            (
              github.event.comment.body == 'recheck' ||
              github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA'
            )
          )
        uses: iainmcgin/cla-github-action@3e58ace6af840f66fcd80f68c08d76559140df5e # v3.0.0, Node.js 24
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          path-to-document: https://github.com/wxy/appilot/blob/master/CLA.md
          path-to-signatures: signatures/v1/cla.json
          branch: cla-signatures
          allowlist: wxy,Xingyu Wang,xingyu.wang@gmail.com,dependabot[bot],renovate[bot],github-actions[bot]
          create-file-commit-message: "legal: initialize Appilot CLA v1 signatures"
          signed-commit-message: "legal: record $contributorName CLA signature for $pullRequestNo"
          custom-notsigned-prcomment: "Thank you for contributing to Appilot. Please read $pathToCLADocument and post exactly: `I have read the CLA Document and I hereby sign the CLA`\n\n感谢贡献。请先阅读 CLA，然后发布上面的英文签署声明。"
          custom-pr-sign-comment: "I have read the CLA Document and I hereby sign the CLA"
          custom-allsigned-prcomment: "Appilot CLA v1.0 accepted. Thank you for contributing. / Appilot CLA 1.0 已接受，感谢贡献。"
          lock-pullrequest-aftermerge: true