splunk / addonfactory-github-workflows

Reusable workflows for GitHub Actions

addonfactory-github-workflows

This repository contains workflows that can be reused in Github actions.

explicitly configure permissions when using reusable-agreements, in case your GITHUB_TOKEN workflow permissions are set to read-only in repository settings

permissions: actions: read contents: read pull-requests: read statuses: read

addonfactory-github-workflows's Issues

COC and CLA jobs overrides each other

The issue

The first job asks about CLA, then another job, COC, runs and overrides the comment from the first one. The end user sees the latest message about COC and has no idea of that CLA also has to be signed.

It seems like a bug (or feature) of contributor-assistant/github-action:
https://github.com/contributor-assistant/github-action/blob/master/src/pullrequest/pullRequestComment.ts#L58
It looks for the first occurance of comment with CLA Assistant Lite bot and edits that comment. This github action is not supposed to work as jobs simultaneously.

Solutions

Possible solution 1: merge CLA and COC into a single job.
Possible solution 2: find another alternative for contributor-assistant/github-action

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

None detected

---

• Check this box to trigger a request for Renovate to run again on this repository