ci(cla): allowlist the org's own agent identities

Agent workspace clones commit as '<Display Name> <slug@roboco.tech>';
the emails map to no GitHub account, so CLA Assistant identifies those
committers by display name and reds any PR carrying agent-authored
commits with a signature no agent can post (live on PR #333). The
fleet is the org's own machinery, not an external contributor — the
roster names are allowlisted, wildcarded per team family.
This commit is contained in:
Renn F
2026-07-09 12:19:11 +02:00
parent 213b6ba830
commit a87b55f748
+7 -2
View File
@@ -35,5 +35,10 @@ jobs:
path-to-signatures: "signatures/version1/cla.json"
path-to-document: "https://github.com/rennf93/roboco/blob/master/CLA.md"
branch: "cla-signatures"
# Bots and the maintainer are exempt from signing.
allowlist: "dependabot[bot],rennf93"
# Bots, the maintainer, and the org's own agent identities are
# exempt from signing. Agent commits are authored as
# "<Display Name> <slug@roboco.tech>" (workspace.py _configure_git);
# the emails map to no GitHub account, so CLA Assistant identifies
# them by display name — allowlist those names, wildcarded per team
# family, mirroring roboco/seeds/initial_data.py's roster.
allowlist: "dependabot[bot],rennf93,Backend *,Frontend *,UX/UI *,Main PM,Product Owner,Head of Marketing,Auditor,Intake,Secretary,PR Reviewer,RoboCo Agent"