Skip to content

ci(dco): require a sign-off on every commit - #18

Open
BryanFRD wants to merge 1 commit into
mainfrom
ci/dco
Open

BryanFRD wants to merge 1 commit into
mainfrom
ci/dco

Conversation

@BryanFRD

Copy link
Copy Markdown
Contributor

Adds the shared DCO check (FerrLabs/.github reusable-dco). Every commit of a PR needs a Signed-off-by line; fix with git rebase --signoff origin/main. Renovate signs off through the shared preset.

Signed-off-by: BryanFRD <bryanferrando59@gmail.com>

@ferrfleet-interne ferrfleet-interne Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks right. It follows the pattern of the other workflows: the reusable workflow is pinned by SHA and contents: read is the only permission. Running on pull_request rather than _target is the correct choice, because the job checks out PR commits. The single commit is signed off.

Nit: .github/workflows/dco.yml:5: edited only fires on title/body/base edits, which don't change the commits. It reruns the check for nothing, except when the base branch changes. Drop it unless that base-change case matters to you:
types: [opened, synchronize, reopened]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant