commit.yml

# SPDX-FileCopyrightText: 2024 Skatteverket - Swedish Tax Agency
#
# SPDX-License-Identifier: CC0-1.0

---
name: Conform DCO (--Sign-off)
on: [workflow_call] # yamllint disable-line rule:truthy

permissions:
  contents: read

jobs:
  signoff:
    runs-on: ubuntu-latest
    if: ${{ (github.event_name == 'pull_request') && (github.actor != 'dependabot[bot]') }}
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          fetch-depth: 0
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Setup main branch without switching current branch
        run: git fetch origin main:main

      - name: Conform Action
        uses: docker://ghcr.io/siderolabs/conform:v0.1.0-alpha.30-1-ga6572d2@sha256:31dbdabfe2d9e5d93035bdd8fb8a1e1181d247339e66536b8e6183801d390657
        with:
          args: "enforce --base-branch=main"