FilesExpand file tree

master

/

cla.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

120 lines (105 loc) · 6.18 KB

master

/

cla.yml

Copy path

Top

File metadata and controls

• Code
• Blame

120 lines (105 loc) · 6.18 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

name: CLA Assistant

on:

issue_comment:

types: [created]

pull_request_target:

types: [opened, synchronize, closed]

permissions:

actions: write

contents: read # 'read' is enough because signatures live in a REMOTE repo

pull-requests: write

statuses: write

jobs:

cla-assistant:

runs-on: ubuntu-latest

steps:

# The CLA action normally requires every commit author in a PR to sign.

# We only want the PR author to sign, so we allowlist all other committers

# by computing them from the PR's commits and excluding the PR author.

- name: Build author-only allowlist

id: allowlist

if: >

(github.event_name == 'pull_request_target' && github.event.action != 'closed') ||

(github.event_name == 'issue_comment' && github.event.issue.pull_request && (

github.event.comment.body == 'recheck' ||

github.event.comment.body == 'I have read and agree to the Contributor License Agreement'

))

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

PR_NUMBER: ${{ github.event.pull_request.number || github.event.issue.number }}

PR_AUTHOR: ${{ github.event.pull_request.user.login || github.event.issue.user.login }}

BASE_ALLOWLIST: action@github.com,actions-user,ampagent,claude,comfy-pr-bot,GitHub Action,github-actions,github-actions[bot],Glary Bot,Glary-Bot,*[bot]

# For each commit emit the GitHub login when the author/committer email resolves to a GitHub account

# otherwise fall back to the raw git name.

run: |

if ! commit_authors=$(gh api "repos/${{ github.repository }}/pulls/${PR_NUMBER}/commits" --paginate \

--jq '.[] | (.author.login // .commit.author.name // empty), (.committer.login // .commit.committer.name // empty)'); then

echo "Failed to fetch pull request commits" >&2

exit 1

fi

others=$(printf '%s\n' "$commit_authors" | sort -u | grep -vix "${PR_AUTHOR}" | paste -sd, -)

if [ -n "$others" ]; then

echo "allowlist=${BASE_ALLOWLIST},${others}" >> "$GITHUB_OUTPUT"

else

echo "allowlist=${BASE_ALLOWLIST}" >> "$GITHUB_OUTPUT"

fi

- name: CLA Assistant

# Run on open/update PR events, on "recheck", or when someone posts the signing phrase.

# IMPORTANT: this phrase must match `custom-pr-sign-comment` below.

if: >

(github.event_name == 'pull_request_target' && github.event.action != 'closed') ||

(github.event_name == 'issue_comment' && github.event.issue.pull_request && (

github.event.comment.body == 'recheck' ||

github.event.comment.body == 'I have read and agree to the Contributor License Agreement'

))

uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

# PAT required to write to the centralized signatures repo.

PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}

with:

lock-pullrequest-aftermerge: false

# Where the CLA document lives (shown to contributors)

path-to-document: https://github.com/Comfy-Org/comfy-cla/blob/main/comfyui_icla.md

# Centralized signature storage

remote-organization-name: comfy-org

remote-repository-name: comfy-cla

path-to-signatures: signatures/cla.json

branch: main

# Only the PR author must sign: bots plus every non-author committer

# are allowlisted via the "Build author-only allowlist" step above.

# *[bot] is a catch-all for any GitHub App bot account.

allowlist: ${{ steps.allowlist.outputs.allowlist }}

# Custom PR comment messages

custom-notsigned-prcomment: |

🎉 Thank you for your contribution, we really appreciate it! 🎉

Like many open source projects, we require contributors to sign our [Contributor License Agreement (CLA)](https://github.com/Comfy-Org/comfy-cla/blob/main/comfyui_icla.md). A CLA makes the ownership of contributions explicit, so contributors and the project share a clear understanding of how the code can be used. By signing, you:

- Confirm that you own your contribution.

- Keep the right to reuse your own code.

- Grant us a copyright license to include and share it within our projects.

CLAs are standard practice across major open source projects including those under the Apache Software Foundation and the Linux Foundation. Ours is based on the Apache Software Foundation's CLA. Most importantly, it would enable us to relicense the project under a more permissive license in the future, giving the project and its community greater flexibility.

✍ **To sign, please post a new comment on this PR with exactly the following text:** ✍

custom-pr-sign-comment: I have read and agree to the Contributor License Agreement

custom-allsigned-prcomment: |

✅ All contributors have signed the CLA. Thank you! This PR is ready to be merged.

- name: Lock PR containing a CLA signature or bot approval

if: github.event_name == 'pull_request_target' && github.event.action == 'closed' && github.event.pull_request.merged == true

uses: actions/github-script@v7

with:

retries: 3

script: |

const pr = context.payload.pull_request;

const issue = { ...context.repo, issue_number: pr.number };

const comments = await github.paginate(github.rest.issues.listComments, {

...issue,

per_page: 100,

});

const signed = comments.some(comment =>

(comment.user?.id === pr.user.id &&

comment.body?.trim().toLowerCase() === 'i have read and agree to the contributor license agreement') ||

(comment.user?.login === 'github-actions[bot]' &&

comment.body?.startsWith('✅ All contributors have signed the CLA. Thank you! This PR is ready to be merged.'))

);

if (signed) {

await github.rest.issues.lock(issue);

}