Add the CAA check workflow - #104
Merged
Merged
Conversation
serialize is covered by the org ruleset "Require CAA signature", which requires a status check named caa on main, but the workflow that emits that check was never added here. Every pull request is blocked by a required check with nothing to report it. This is netcode's .github/workflows/cla.yml unchanged. The file carries no repo name, branch or path filter, so it is correct verbatim. The job id caa is what names the check run, and that is the context the ruleset requires. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Glenn ruled on 2026-08-30 that the CAA stays on the serialize repos, and goes on every open source repo from here on. This adds the missing half of that here.
The org ruleset "Require CAA signature" already requires a status check named
caaon main in this repo. The workflow that emits that check was never added, so the required check has no emitter and every pull request sits blocked behind it.The file is
netcode/.github/workflows/cla.ymlcopied verbatim. It carries no repo name, no branch filter and no path filter, so nothing needed adapting. The job idcaais what names the check run: netcode PR #180 merged through it on 2026-08-26 with a check run namedcaaunder the workflow "Contributor Assignment Agreement", which is exactly the context the ruleset asks for. The org secret CLA_SIGNATURES_TOKEN is org wide and already visible to this repo.Nothing here touches LICENSE, licensing prose or package license metadata.
This pull request cannot merge on its own, and that is the point. It is the emitter for the check that blocks it. A direct push to main is refused the same way:
Merging it needs one org admin action on the ruleset, which is Glenn's to make. Once this file is on main, the check reports normally here and the blocked pull requests clear with a
recheckcomment.