ci: bump cla-github-action to 73f6929 (email-based allowlist)#74
Merged
ci: bump cla-github-action to 73f6929 (email-based allowlist)#74
Conversation
The new revision adds email-based matching to the allowlist so that synthetic Co-authored-by trailers from AI assistants can be filtered without tracking changing display names. Allowlist 'noreply@anthropic.com' to suppress the AI co-author identity used by Claude and similar tools; the PR opener still has to sign the CLA.
|
All contributors have signed the CLA ✍️ ✅ |
asacamano
approved these changes
Apr 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps
iainmcgin/cla-github-actionto73f6929and allowlistsnoreply@anthropic.com.The new revision adds email-based matching to the allowlist alongside the existing name-based match. AI assistants commonly add
Co-authored-by:trailers likeClaude Opus 4.7 <noreply@anthropic.com>, and the impersonation guard added in the previous bump correctly counts those as committers — without an email allowlist, every PR with such a trailer fails the CLA check. The new entry suppresses the synthetic identity once. The PR opener still has to sign.Tests on the action: 100/100 pass, including new cases for exact email match,
*@anthropic.comglob, and the no-email-supplied path.Caught while reviewing PR #63 — connyay's commit there carries a
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>trailer that was failing the CLA check after the previous bump landed on main.