ci: bump cla-github-action to 73f6929 (email-based allowlist)#89
Open
ci: bump cla-github-action to 73f6929 (email-based allowlist)#89
Conversation
The new revision adds email-based matching to the allowlist alongside the existing name-based match. AI assistants commonly add Co-authored-by: trailers like 'Claude Opus 4.7 <noreply@anthropic.com>', and the impersonation guard counts those as committers — without an email allowlist, every PR with such a trailer fails the CLA check. Allowlisting 'noreply@anthropic.com' suppresses the synthetic identity; the PR opener still has to sign.
|
All contributors have signed the CLA ✍️ ✅ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps
iainmcgin/cla-github-actionto73f6929and allowlistsnoreply@anthropic.com.The new revision adds email-based matching to the allowlist alongside the existing name-based match. AI assistants commonly add
Co-authored-by:trailers likeClaude Opus 4.7 <noreply@anthropic.com>, and the impersonation guard added in the previous bump correctly counts those as committers — without an email allowlist, every PR with such a trailer fails the CLA check. Allowlistingnoreply@anthropic.comsuppresses the synthetic identity. The PR opener still has to sign.Tests on the action itself: 100/100 pass, including new cases for exact email match,
*@anthropic.comglob, and the no-email-supplied path.Pre-emptive on this repo — connect-rust hit this in PR anthropics/connect-rust#63 (fix tracked in anthropics/connect-rust#74); buffa will encounter the same trailer pattern soon enough.