feat(ci): add new ci for commit format checking

[im-vishesh15th]

issue#182

Changes

• Added a GitHub Actions workflow to validate commit messages on pull requests
• Enforces the existing commit message convention:
  <type>(<scope>): <subject>
• Ignores auto-generated merge commits created by GitHub during PR checks
• Ensures only human-authored commits are validated

Example of a valid commit message

ci(github-actions): enforce commit message convention on pull requests

Submitter Checklist

• Includes tests (if there is a feature changed/added)
• Includes docs ( if changes are user facing)
• I have tested my changes locally.

[im-vishesh15th]

Hi @deo002 and @ChayanDass,
adding a local pre-commit or commit-msg hook to validate commit messages could improve the contributor experience, instead of checking them only during PRs.

what do you think about it ?

[deo002]

Yep, sounds perfect! @im-vishesh15th

[Kaushl2208]

Hi @im-vishesh15th , Instead of creating specific regex and scripting your way out we can utilise, already provided tools from github actions (helps us reduce maintainability). Here are the links to such:

Lint Commits: https://github.com/fossology/fossology/blob/792818e5d6968c6fbe19193f25d2c54e8ea31e90/.github/workflows/static-checks.yml#L120

Also include the DCO Check:

https://github.com/fossology/fossology/blob/792818e5d6968c6fbe19193f25d2c54e8ea31e90/.github/workflows/static-checks.yml#L139

And we dont need a pre-commit check for now. Tests in CI for each PR will do just fine.

[im-vishesh15th]

Hey @deo002 and @Kaushl2208
I have corrected the workflow according to your suggestions ,
Please have a look , and let me know is any further changes required

[Kaushl2208]

@im-vishesh15th , Looks good now. Can you rebase the branch?

[im-vishesh15th]

I have done the rebase

[Kaushl2208]

LGTM..
Thanks for your contributions @im-vishesh15th

[Kaushl2208]

Hi @im-vishesh15th , Can you also add a verified signature to your commit.
Here is the help docs: Sign Commits

[im-vishesh15th]

i have verified and signed my commits, please check!