Run CLA retry after any workflow completion #1
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Retry CLA Assistant | ||
|
Check failure on line 1 in .github/workflows/retry-cla-assistant.yml
|
||
| # CLA Assistant publishes `license/cla` as a commit status, not a check run. | ||
| # If its webhook handler misses a PR update, GitHub branch protection can wait | ||
| # forever even after every real CI check has passed. This workflow nudges CLA | ||
| # Assistant only when that status is the sole remaining non-green signal. | ||
| # | ||
| # SECURITY: This workflow uses pull_request_target so it can inspect PR status | ||
| # for forks, but it must never check out, build, or execute code from the PR. | ||
| on: | ||
| pull_request_target: | ||
| types: [opened, reopened, synchronize, ready_for_review] | ||
| workflow_run: | ||
| types: [completed] | ||
| schedule: | ||
| - cron: "7,22,37,52 * * * *" | ||
| permissions: | ||
| actions: read | ||
| checks: read | ||
| contents: read | ||
| pull-requests: read | ||
| statuses: read | ||
| jobs: | ||
| retry-cla: | ||
| name: Retry CLA Assistant if it is the only blocker | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Check out trusted base code | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| ref: ${{ github.event.repository.default_branch }} | ||
| - uses: dsherret/rust-toolchain-file@v1 | ||
| - name: Recheck CLA Assistant | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| INPUT_PR_NUMBER: ${{ inputs.pr_number }} | ||
| run: cargo ci retry-cla-assistant | ||
