Skip to content

Store CLA signatures per-repo; drop CLA_SIGNATURE_STORE_TOKEN - #4

Merged
kreneskyp merged 1 commit into
mainfrom
plat-862-cla-per-repo-signatures
Sep 20, 2026
Merged

kreneskyp merged 1 commit into
mainfrom
plat-862-cla-per-repo-signatures

Conversation

@kreneskyp

Copy link
Copy Markdown
Contributor

Reconfigure the CLA gate to store signatures in this repo instead of
centrally in agent-ix/.github, using this repo's own automatic
GITHUB_TOKEN instead of the CLA_SIGNATURE_STORE_TOKEN org secret / PAT.

Owner ruling on PLAT-862: "PAT and all that comes with it isnt worth what
we save from having it per repo." A contributor now signs once per repo
they contribute to, rather than once org-wide.

  • Removes the CLA_SIGNATURE_STORE_TOKEN secret forward (no longer needed).
  • Sets explicit permissions (contents: write, pull-requests: write,
    issues: write, actions: write, statuses: write) instead of the default.
  • No change to the legal-name gate job (unchanged, lives in
    agent-ix/.github/.github/workflows/cla-assistant-lite.yml).

See agent-ix/.github PR for the reusable-workflow side of this change.

Co-Authored-By: Claude Sonnet 5 noreply@anthropic.com

@kreneskyp
kreneskyp requested a review from a team as a code owner September 20, 2026 22:59
@kreneskyp
kreneskyp merged commit 54e7807 into main Sep 20, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant