mirror of
https://github.com/rennf93/roboco.git
synced 2026-08-03 07:23:24 +02:00
Renn F
cdde3b256e
master requires verified signatures, but CONTRIBUTING only mentioned the DCO sign-off (git commit -s) — which does NOT satisfy the rule, steering contributors straight into the merge block. Add a 'Signing your commits' section (SSH signing setup, the -s vs -S distinction, and how to re-sign already-pushed commits) and surface it in the first-PR greeting checklist.
45 lines
2.5 KiB
YAML
45 lines
2.5 KiB
YAML
name: Greetings
|
|
|
|
on: [pull_request_target, issues]
|
|
|
|
jobs:
|
|
greeting:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
issues: write
|
|
pull-requests: write
|
|
steps:
|
|
- uses: actions/first-interaction@v3
|
|
with:
|
|
repo_token: ${{ secrets.GITHUB_TOKEN }}
|
|
issue_message: |
|
|
Thanks for opening your first issue on **RoboCo**!
|
|
|
|
To help us triage quickly, please make sure your report includes:
|
|
- A clear reproduction (steps, configuration, or a failing test)
|
|
- Output of `python --version && uv --version` (and Docker / Docker Compose versions if it's a deployment issue)
|
|
- Which subsystem is involved if you can tell (api, services, gateway, orchestrator, enforcement, db, agents, mcp, panel, alembic)
|
|
- Relevant logs / tracebacks / `ROBOCO_*` configuration
|
|
|
|
A few pointers:
|
|
- Read [CONTRIBUTING.md](../blob/master/CONTRIBUTING.md) for the contribution workflow and the CLA step.
|
|
- We follow the [Contributor Covenant Code of Conduct](../blob/master/CODE_OF_CONDUCT.md).
|
|
- **Security vulnerability?** Do **not** open a public issue — please follow [SECURITY.md](../blob/master/SECURITY.md) and use GitHub's private vulnerability reporting.
|
|
|
|
Thanks again — a maintainer will be with you soon.
|
|
pr_message: |
|
|
Thanks for opening your first pull request on **RoboCo**!
|
|
|
|
Quick checklist before review (most of these are enforced by CI, but worth a glance):
|
|
- [ ] `make quality` — ruff format check, ruff check, mypy, pytest (≥80% coverage), and the rest of the gate
|
|
- [ ] Panel changes pass `pnpm lint` and `pnpm exec tsc --noEmit` (run from `panel/`)
|
|
- [ ] No `# noqa` / `# type: ignore` shortcuts; pre-existing violations in touched files are fixed
|
|
- [ ] Added an entry under `## [Unreleased]` in [CHANGELOG.md](../blob/master/CHANGELOG.md)
|
|
- [ ] Signed the [CLA](../blob/master/CLA.md) (the bot will prompt you on this PR)
|
|
- [ ] Signed your commits — `master` requires verified signatures ([SSH signing setup](../blob/master/CONTRIBUTING.md#signing-your-commits))
|
|
- [ ] Updated any affected docs under `docs/`
|
|
|
|
See [CONTRIBUTING.md](../blob/master/CONTRIBUTING.md) for the full workflow and the [Code of Conduct](../blob/master/CODE_OF_CONDUCT.md) for the community standards we follow.
|
|
|
|
Welcome aboard — a maintainer will review shortly.
|