DCO

fix(release): recognize the installed wheel in deep doctor #4135

	name: DCO

	on:
	pull_request:

	permissions:
	contents: read

	jobs:
	signoff:
	name: Sign-off
	runs-on: ubuntu-latest
	timeout-minutes: 5
	steps:
	- name: Check out pull-request history
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	fetch-depth: 0

	- name: Require a DCO trailer on every commit
	env:
	BASE_REF: ${{ github.event.pull_request.base.ref }}
	HEAD_SHA: ${{ github.event.pull_request.head.sha }}
	shell: bash
	run: \|
	set -euo pipefail

	# The event's base SHA can predate upstream commits already in the PR.
	# Refresh the exact target branch before selecting PR-only commits.
	git fetch --no-tags origin \
	"+refs/heads/${BASE_REF}:refs/remotes/origin/${BASE_REF}"
	# Keep this outside process substitution so a failed range lookup
	# cannot silently turn into a successful check of zero commits.
	commits=$(git rev-list --reverse "refs/remotes/origin/${BASE_REF}..${HEAD_SHA}")

	missing=0
	while IFS= read -r commit; do
	[[ -z "${commit}" ]] && continue
	if ! git show -s --format=%B "${commit}" \|
	grep -Eq '^Signed-off-by: [^<]+ <[^<>[:space:]]+@[^<>[:space:]]+>$'; then
	echo "::error::Commit ${commit} is missing a valid Signed-off-by trailer."
	missing=1
	fi
	done <<< "${commits}"

	if [[ "${missing}" -ne 0 ]]; then
	echo "Add the DCO certification with: git commit --amend -s"
	exit 1
	fi

Navigation Menu