From 335eac2b1bca17c0d5e14ea7256e6941fd19182c Mon Sep 17 00:00:00 2001 From: Mayank Singh Date: Fri, 29 May 2026 08:25:01 +0000 Subject: [PATCH] Enable Microsoft CLA bot for external PRs - Add .github/workflows/cla.yml to run Microsoft CLA check on PRs - Update CONTRIBUTING.md with CLA requirement documentation - Allowlist bot accounts and Microsoft org members - CLA signatures stored in signatures/version1/cla.json --- .github/workflows/cla.yml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .github/workflows/cla.yml diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml new file mode 100644 index 00000000000..09a019a9efa --- /dev/null +++ b/.github/workflows/cla.yml @@ -0,0 +1,32 @@ +name: "Microsoft CLA" + +on: + issue_comment: + types: [created] + pull_request_target: + types: [opened, closed, synchronize] + +permissions: + contents: write # Required to store CLA signatures + pull-requests: write # Required to comment on PRs + statuses: write # Required to set CLA status check + +jobs: + cla: + runs-on: ubuntu-latest + steps: + - name: "Microsoft CLA Assistant" + if: | + (github.event_name == 'issue_comment' && github.event.issue.pull_request && + (github.event.comment.body == 'recheck' || + github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA')) || + github.event_name == 'pull_request_target' + uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + with: + path-to-signatures: "signatures/version1/cla.json" + path-to-document: "https://cla.opensource.microsoft.com/microsoft/azure-container-linux" + branch: "aclmain" + allowlist: "bot*,*[bot],microsoft-github-operations-bot,dependabot*,msftbot,azure-pipelines-bot" + lock-pullrequest-aftermerge: true