Skip to content

Conversation

@JasonXuDeveloper
Copy link
Owner

Summary

  • Add CLA Assistant workflow for contributor agreement tracking
  • Add .scorecard.yml configuration to document legitimate binary artifacts

Changes

CLA Assistant (.github/workflows/cla.yml)

  • Uses Developer Certificate of Origin (consistent with existing DCO check)
  • Automatically comments on PRs requesting signature from new contributors
  • Stores signatures in signatures/cla.json
  • Allowlists common bots (dependabot, github-actions, etc.)

Scorecard Configuration (.scorecard.yml)

  • Documents why binary artifacts are required and cannot be removed:
    • HybridCLR Plugin: Native DLLs for IL2CPP hot-update
    • YooAsset Bundles: Sample project assets
    • AOT Compiled DLLs: Unity engine module references

Reference: Scorecard annotations documentation

Impact

  • Improves contributor experience with automated CLA/DCO tracking
  • Documents legitimate binary artifacts for Scorecard compliance
  • May help improve Binary-Artifacts score once Scorecard fully supports annotations

Test plan

  • CLA workflow triggers on new PRs from external contributors
  • Scorecard shows annotations when run with --show-annotations

🤖 Generated with Claude Code

- Add CLA Assistant workflow using DCO (Developer Certificate of Origin)
- Add .scorecard.yml with annotations explaining legitimate binary artifacts
- Create signatures/cla.json to store CLA signatures

The CLA workflow integrates with existing DCO requirements and provides
a better contributor experience with automated signature tracking.

The Scorecard configuration documents why binary artifacts (HybridCLR,
YooAsset bundles, AOT DLLs) are required for this Unity framework and
cannot be removed.

Signed-off-by: Jason Xu <jasonxudeveloper@gmail.com>
Signed-off-by: JasonXuDeveloper - 傑 <jason@xgamedev.net>
@github-actions github-actions bot added the ci label Jan 26, 2026
@github-actions
Copy link

Unity Test Results

EditMode: All tests passed
PlayMode: All tests passed

Unity Version: 2022.3.55f1
Project Path: UnityProject

✅ All tests passed! The PR is ready for review.

View workflow run

Click here to view the full workflow run

@claude
Copy link

claude bot commented Jan 26, 2026

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.

@JasonXuDeveloper JasonXuDeveloper merged commit d6d89b2 into master Jan 26, 2026
18 checks passed
@JasonXuDeveloper JasonXuDeveloper deleted the feat/cla-and-scorecard-config branch January 26, 2026 07:53
@github-actions github-actions bot locked and limited conversation to collaborators Jan 26, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants