cla.yaml

# Invoke Shopify/shopify-cla-action
#
# This should be called on:
# - pull_request_target.{opened,synchronize}: for triggering from third party pulls
# - issue_comment.created: for detecting comments

name: Contributor License Agreement (CLA)

on:
  workflow_call:
    secrets:
      token:
        required: true
      cla-token:
        required: true

permissions: {}

jobs:
  cla:
    runs-on: ubuntu-latest
    if: |
      (github.event.issue.pull_request
        && !github.event.issue.pull_request.merged_at
        && contains(github.event.comment.body, 'signed')
      )
      || (github.event.pull_request && !github.event.pull_request.merged)
    permissions:
      actions: write # to re-trigger workflows
      pull-requests: write # to add/remove labels
    steps:
      - uses: Shopify/shopify-cla-action@9938f4b43524d1cfa7471ce9a803edf226697284 # v1.8.0
        with:
          github-token: ${{ secrets.token }}
          cla-token: ${{ secrets.cla-token }}