diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..1c167f1 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,2 @@ +# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners#example-of-a-codeowners-file +* @ddevsr \ No newline at end of file diff --git a/.github/workflows/check-conflict.yml b/.github/workflows/check-conflict.yml new file mode 100644 index 0000000..a0554c7 --- /dev/null +++ b/.github/workflows/check-conflict.yml @@ -0,0 +1,28 @@ +name: Check conflict branch in PR +on: + schedule: + - cron: '*/20 * * * *' # Run at every 20 minutes + +jobs: + build: + name: Check conflict branch in PR + permissions: + contents: read + pull-requests: write + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Check conflict branch in PR + uses: PHPDevsr/check-conflict-action@v1.0.0 + with: + token: ${{ secrets.GITHUB_TOKEN }} + label: stale + comment: | + :wave: Hi, @authorTarget! + + We detected conflicts in your PR against the base branch :speak_no_evil: + You may want to sync :arrows_counterclockwise: your branch with upstream! + + Ref: [Syncing Your Branch](https://github.com/codeigniter4/CodeIgniter4/blob/develop/contributing/workflow.md#pushing-your-branch) \ No newline at end of file diff --git a/.github/workflows/check-signed.yml b/.github/workflows/check-signed.yml new file mode 100644 index 0000000..c9a8209 --- /dev/null +++ b/.github/workflows/check-signed.yml @@ -0,0 +1,30 @@ +name: Check Signed PR +on: + pull_request: + branches: + - 'dev' + +concurrency: + group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} + cancel-in-progress: true + +jobs: + build: + name: Check Signed Commit + permissions: + contents: read + pull-requests: write + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Check signed commits in PR + uses: 1Password/check-signed-commits-action@v1 + with: + comment: | + You must GPG-sign your work, certifying that you either wrote the work or otherwise have the right to pass it on to an open-source project. See Developer's Certificate of Origin. See [signing][1]. + + **Note that all your commits must be signed.** If you have an unsigned commit, you can sign the previous commits by referring to [gpg-signing-old-commits][2]. + [1]: https://github.com/codeigniter4/CodeIgniter4/blob/develop/contributing/pull_request.md#signing + [2]: https://github.com/codeigniter4/CodeIgniter4/blob/develop/contributing/workflow.md#gpg-signing-old-commits \ No newline at end of file