cla.yaml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
---
name: "CLA"
on: # yamllint disable-line rule:truthy
  issue_comment:
    types:
      - "created"
  pull_request_target:
    types:
      - "opened"
      - "closed"
      - "synchronize"
  merge_group:
    types:
      - "checks_requested"
permissions:
  actions: "write"
  contents: "read" # CLA signatures are stored in https://github.com/authzed/cla
  pull-requests: "write"
  statuses: "write"
concurrency:
  group: "spicedb-cla-${{ github.event.pull_request.number }}"
  cancel-in-progress: true
jobs:
  cla:
    name: "Check Signature"
    runs-on: "depot-ubuntu-24.04-small"
    steps:
      - uses: "authzed/actions/cla-check@11667c9b2e8b3649ad2af4d788e57d18f8e8eaf1" # main
        with:
          github_token: "${{ secrets.GITHUB_TOKEN }}"
          cla_assistant_token: "${{ secrets.CLA_ASSISTANT_ACCESS_TOKEN }}"