check_cla_ruleset.yml

# triggered on all repositories via rulesets

name: CLA Check Ruleset

on:
  # because the cla workflow will run on worflows generated from forks, they do not have access to secrets
  # pull_request_target only runs the workflow on the master branch but allows access to secrets
  pull_request_target:
    branches:
      - 'master'
      - 'main'
  merge_group:

jobs:
  call-check-cla:
    uses: dfinity/public-workflows/.github/workflows/check_cla.yml@main
    secrets: inherit