cla.yml

name: CLA Assistant

on:
    issue_comment:
        types: [created]
    pull_request_target:
        types: [opened, closed, synchronize]

jobs:
    CLA:
        runs-on: ubuntu-latest
        # This job only runs for pull request comments or pull request target events (not issue comments)
        if: github.event.issue.pull_request || github.event_name == 'pull_request_target'
        steps:
            - uses: actions-ecosystem/action-regex-match@9c35fe9ac1840239939c59e5db8839422eed8a73
              id: sign
              with:
                  text: ${{ github.event.comment.body }}
                  regex: '\s*I have read the CLA Document and I hereby sign the CLA\s*'
            - uses: actions-ecosystem/action-regex-match@9c35fe9ac1840239939c59e5db8839422eed8a73
              id: recheck
              with:
                  text: ${{ github.event.comment.body }}
                  regex: '\s*recheck\s*'
            - name: CLA Assistant
              if: ${{ steps.recheck.outputs.match != '' || steps.sign.outputs.match != '' }} || github.event_name == 'pull_request_target'
              # Version: 2.1.2-beta
              uses: cla-assistant/github-action@948230deb0d44dd38957592f08c6bd934d96d0cf
              env:
                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                  PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_BOTIFY_TOKEN }}
              with:
                  path-to-signatures: '${{ github.repository }}/cla.json'
                  path-to-document: 'https://github.com/${{ github.repository }}/blob/master/CLA.md'
                  branch: 'main'
                  remote-organization-name: 'Expensify'
                  remote-repository-name: 'CLA'
                  lock-pullrequest-aftermerge: false
                  allowlist: dependabot,snyk-bot