From 033c7fba2662272ce05dbcc318cd4927d94394c5 Mon Sep 17 00:00:00 2001 From: Abir Abbas Date: Mon, 21 Sep 2026 09:38:15 -0400 Subject: [PATCH] fix(cla): store signatures locally so the CLA check can run MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The workflow set remote-organization-name/remote-repository-name to this same repo, which sends contributor-assistant down its remote-storage path. That path calls getPATOctokit(), which fails the job when PERSONAL_ACCESS_TOKEN is absent — and it runs unconditionally in getFileContent(), after the allowlist filter, so even allowlisted maintainers hit it. Dropping the two inputs makes the action use GITHUB_TOKEN against the current repo, which is the same destination; contents needs write so it can create and update cla-signatures.json on main. workflow-templates/cla.yml carries the identical bug to every repo that adopts the org template, so it gets the same fix. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/cla.yml | 4 +--- workflow-templates/cla.yml | 4 +--- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 525a47e..31c8aba 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -7,7 +7,7 @@ on: permissions: actions: write - contents: read + contents: write pull-requests: write statuses: write @@ -27,8 +27,6 @@ jobs: path-to-document: "https://github.com/Agent-Field/.github/blob/main/CLA.md" branch: "main" allowlist: santoshkumarradha,AbirAbbas,dependabot[bot],github-actions[bot] - remote-organization-name: Agent-Field - remote-repository-name: .github create-file-commit-message: "chore: create CLA signatures file" signed-commit-message: "chore: $contributorName signed the CLA" custom-notsigned-prcomment: | diff --git a/workflow-templates/cla.yml b/workflow-templates/cla.yml index 525a47e..31c8aba 100644 --- a/workflow-templates/cla.yml +++ b/workflow-templates/cla.yml @@ -7,7 +7,7 @@ on: permissions: actions: write - contents: read + contents: write pull-requests: write statuses: write @@ -27,8 +27,6 @@ jobs: path-to-document: "https://github.com/Agent-Field/.github/blob/main/CLA.md" branch: "main" allowlist: santoshkumarradha,AbirAbbas,dependabot[bot],github-actions[bot] - remote-organization-name: Agent-Field - remote-repository-name: .github create-file-commit-message: "chore: create CLA signatures file" signed-commit-message: "chore: $contributorName signed the CLA" custom-notsigned-prcomment: |