From 95324ecdbbe4fc7d7b5ff083856ef498ad9f8011 Mon Sep 17 00:00:00 2001
From: Michael <m.mckeen@f5.com>
Date: Tue, 16 Jul 2024 16:13:44 -0400
Subject: [PATCH] Add GitHub Action workflow for F5 CLA integration (#754)

---
 .github/workflows/f5-cla.yml | 40 ++++++++++++++++++++++++++++++++++++
 CONTRIBUTING.md              | 10 +++++++++
 2 files changed, 50 insertions(+)
 create mode 100644 .github/workflows/f5-cla.yml

diff --git a/.github/workflows/f5-cla.yml b/.github/workflows/f5-cla.yml
new file mode 100644
index 00000000..85e4021e
--- /dev/null
+++ b/.github/workflows/f5-cla.yml
@@ -0,0 +1,40 @@
+---
+name: F5 CLA
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, closed, synchronize]
+permissions: read-all
+jobs:
+  f5-cla:
+    name: F5 CLA
+    runs-on: ubuntu-22.04
+    permissions:
+      actions: write
+      pull-requests: write
+      statuses: write
+    steps:
+      - name: Run F5 Contributor License Agreement (CLA) assistant
+        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have hereby read the F5 CLA and agree to its terms') || github.event_name == 'pull_request_target'
+        uses: contributor-assistant/github-action@9340315624c6e16cef1f2c63bdeb0f0c49c6f474 # v2.4.0
+        with:
+          # Any pull request targeting the following branch will trigger a CLA check.
+          branch: 'main'
+          # Path to the CLA document.
+          path-to-document: 'https://github.com/f5/.github/blob/main/CLA/cla-markdown.md'
+          # Custom CLA messages.
+          custom-notsigned-prcomment: '🎉 Thank you for your contribution! It appears you have not yet signed the F5 Contributor License Agreement (CLA), which is required for your changes to be incorporated into an F5 Open Source Software (OSS) project. Please kindly read the [F5 CLA](https://github.com/f5/.github/blob/main/CLA/cla-markdown.md) and reply on a new comment with the following text to agree:'
+          custom-pr-sign-comment: 'I have hereby read the F5 CLA and agree to its terms'
+          custom-allsigned-prcomment: '✅ All required contributors have signed the F5 CLA for this PR. Thank you!'
+          # Remote repository storing CLA signatures.
+          remote-organization-name: 'f5'
+          remote-repository-name: 'f5-cla-data'
+          path-to-signatures: 'signatures/beta/signatures.json'
+          # Comma separated list of usernames for maintainers or any other individuals who should not be prompted for a CLA.
+          allowlist: lucacome, pleshakov, bot*
+          # Do not lock PRs after a merge.
+          lock-pullrequest-aftermerge: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.F5_CLA_TOKEN }}
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 162ee156..0d50be48 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -63,6 +63,16 @@ issue template.
   type of issue it is (bug, feature request, etc) and to determine the milestone. Please see the [Issue
   Lifecycle](ISSUE_LIFECYCLE.md) document for more information.
 
+### F5 Contributor License Agreement (CLA)
+
+F5 requires all external contributors to agree to the terms of the F5 CLA
+(available [here](https://github.com/f5/.github/blob/main/CLA/cla-markdown.md)) before any of their changes can be
+incorporated into an F5 Open Source repository.
+
+If you have not yet agreed to the F5 CLA terms and submit a PR to this repository, a bot will prompt you to view and
+agree to the F5 CLA. You will have to agree to the F5 CLA terms through a comment in the PR before any of your changes
+can be merged. Your agreement signature will be safely stored by F5 and no longer be required in future PRs.
+
 ## Style Guides
 
 ### Git Style Guide