This public repository hosts OllyGarden's organization profile, shared community-health files, and reusable GitHub workflows.
This repository also provides OllyGarden's default community health files for public repositories that do not define their own:
The Contributor License Agreement is not an inherited GitHub
community-health file. Participating repositories use it through a
reusable CLA workflow and keep a small caller
workflow with the relevant events and permissions. The reusable workflow runs
with the caller repository's context and stores signatures on that
repository's cla-signatures branch.
Caller workflows must handle issue_comment (created) and pull_request_target (opened,
closed, and synchronize) events and grant actions: write, contents: write,
pull-requests: write, and statuses: write to the calling job. The repository's
cla-signatures branch must remain writable and must not be protected by branch rules so the CLA
action can create and update signatures/cla.json.
The caller job must filter new issue comments to pull requests and to the two commands understood by the CLA action. A minimal caller is:
name: CLA Assistanton:
issue_comment:
types: [created]pull_request_target:
types: [opened, closed, synchronize]jobs:
cla:
if: >- github.event_name == 'pull_request_target' || (github.event.issue.pull_request && (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA'))permissions:
actions: writecontents: writepull-requests: writestatuses: writeuses: ollygarden/.github/.github/workflows/cla.yml@<40-character-commit-sha>Pin the reusable workflow to an immutable commit. Runs are serialized per
caller repository and pull request without cancelling in-progress work or
sharing a pending slot with unrelated pull requests. The implementation pin
does not pin the agreement text: the action links to CLA.md on this
repository's main branch, so merged agreement changes apply to future
signatures immediately.
See CONTRIBUTING.md for the public contribution workflow, validation expectations, CLA process, and pull request conventions. Repository maintainers and automated tools should also follow AGENTS.md when changing inherited policy or reusable workflows.
Security vulnerabilities must be reported privately according to SECURITY.md.
This repository is licensed under the Apache License 2.0.