chore(main): release patchloom 0.0.7 #166
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: DCO | |
| on: | |
| pull_request: | |
| branches: [main] | |
| merge_group: {} | |
| workflow_dispatch: {} | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: dco-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| dco: | |
| name: DCO sign-off | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Harden runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Check DCO sign-off | |
| env: | |
| BASE_SHA: ${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha || github.sha }} | |
| run: | | |
| for sha in $(git rev-list "${BASE_SHA}"..HEAD); do | |
| # Skip merge commits (GitHub's auto-created PR merge ref) | |
| parents=$(git log -1 --format='%P' "$sha") | |
| if [[ "$parents" == *" "* ]]; then | |
| continue | |
| fi | |
| author=$(git log -1 --format='%an' "$sha") | |
| if [[ "$author" == *"[bot]" ]]; then | |
| echo "Skipping bot commit $sha by $author" | |
| continue | |
| fi | |
| if ! git log -1 --format='%B' "$sha" | grep -qi '^Signed-off-by:'; then | |
| echo "::error::Commit $sha by $author is missing Signed-off-by" | |
| exit 1 | |
| fi | |
| done | |
| echo "All commits have DCO sign-off" |