From 4aac2414604500cd37707e91d2dc6bc28dd419b3 Mon Sep 17 00:00:00 2001 From: Nicholas Siemons Date: Tue, 29 Sep 2026 11:39:40 -0700 Subject: [PATCH] CLA workflow: allowlist the maintainer's GitHub login The allowlist named 'nsiemons', which is a git author name, not a GitHub login. The maintainer's commits are attributed to nicholas9182, so the bot asked the repo owner to sign. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/cla.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 7a6b7d1..04609f8 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -31,7 +31,9 @@ jobs: path-to-signatures: 'signatures/cla.json' path-to-document: 'https://github.com/stanford-developers/steer-core/blob/main/CLA.md' branch: 'cla-signatures' - allowlist: 'nsiemons,dependabot[bot],github-actions[bot]' + # GitHub logins, not git author names: the maintainer commits as nicholas9182. + # Bots never sign; their changes are reviewed by the maintainer. + allowlist: 'nicholas9182,dependabot[bot],github-actions[bot]' custom-notsigned-prcomment: > Thank you for your contribution! Before we can merge this PR, you need to sign our [Contributor License Agreement](https://github.com/stanford-developers/steer-core/blob/main/CLA.md).