Skip to content

Governance v1.0.2: CLA gate degrades gracefully while PAT is unset#5

Merged
enricopiovesan merged 1 commit into
bootstrap-governancefrom
governance-v1.0.2
Jul 7, 2026
Merged

Governance v1.0.2: CLA gate degrades gracefully while PAT is unset#5
enricopiovesan merged 1 commit into
bootstrap-governancefrom
governance-v1.0.2

Conversation

@enricopiovesan

Copy link
Copy Markdown
Contributor

With cla / cla now required org-wide and CLA_ASSISTANT_PAT not yet configured, the CLA action failed at startup for every author — blocking all PRs including the owner's and Dependabot's. This adds a config guard: allowlisted authors (owner, *[bot]) pass with a warning until the secret is set; non-allowlisted authors keep failing closed, so no unsigned external contribution can merge.

See CHANGELOG.md 1.0.2.

🤖 Generated with Claude Code

@enricopiovesan

Copy link
Copy Markdown
Contributor Author

recheck

- Degrade gracefully while CLA_ASSISTANT_PAT is unset: allowlisted authors
  pass with a warning; external authors still fail closed.
- Allowlist the owner's coding-agent identities (claude, cursoragent) and
  the owner's unlinked machine-local git identity.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@enricopiovesan

Copy link
Copy Markdown
Contributor Author

recheck

@enricopiovesan enricopiovesan merged commit e2635ca into bootstrap-governance Jul 7, 2026
2 of 3 checks passed
@enricopiovesan enricopiovesan deleted the governance-v1.0.2 branch July 7, 2026 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant