ribtoks/CLA Assistant Action
An action to handle the Contributor License Agreement (CLA) and Developer Certificate of Orgin (DCO)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 22, 2026
- License
- Apache 2.0
Pinned Snippet
uses: ribtoks/cla-github-action@f22feedd1f3f46f23fab3bc100081d349f9108af # v2.6.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path-to-signatures | Give a path for storing CLAs in a json file | — | ./signatures/cla.json |
| branch | provide a branch where all the CLAs are stored | — | master |
| allowlist | users in the allow list don't have to sign the CLA document | — | "" |
| remote-repository-name | provide the remote repository name where all the signatures should be stored | — | — |
| remote-organization-name | provide the remote organization name where all the signatures should be stored | — | — |
| path-to-document | Fully qualified web link to the document - example: https://github.com/ribtoks/cla-github-action/blob/master/SAPCLA.md | — | — |
| signed-commit-message | Commit message when a new contributor signs the CLA in a PR | — | — |
| signed-empty-commit-message | Commit message when a new contributor signs the CLA (empty) | — | — |
| create-file-commit-message | Commit message when a new file is created | — | — |
| custom-notsigned-prcomment | Introductory message to ask new contributors to sign | — | — |
| custom-pr-sign-comment | The signature to be committed in order to sign the CLA. | — | — |
| custom-allsigned-prcomment | pull request comment when everyone has signed, defaults to **CLA Assistant Lite** All Contributors have signed the CLA. | — | — |
| use-dco-flag | Set this to true if you want to use a dco instead of a cla | — | false |
| lock-pullrequest-aftermerge | Will lock the pull request after merge so that the signature the contributors cannot revoke their signature comments after merge | — | true |
| suggest-recheck | Controls whether or not the action's comment should suggest that users comment `recheck`. | — | true |
Outputs
no outputs