CLA: use full action #5

	name: "CLA Assistant"
	on:
	pull_request_target:
	types: [opened,closed,synchronize]

	# explicitly configure permissions, in case your GITHUB_TOKEN workflow permissions are set to read-only in repository settings
	permissions:
	actions: write
	contents: write
	pull-requests: write
	statuses: write

	jobs:
	CLAAssistant:
	runs-on: ubuntu-latest
	steps:
Check failure on line 16 in .github/workflows/cla.yml View workflow run for this annotation GitHub Actions / CLA Assistant Invalid workflow file `The workflow is not valid. .github/workflows/cla.yml (Line: 16, Col: 7): Secret ZAP_CLA_PAT is required, but not provided while calling.`
	- name: "CLA Assistant"
	if: (github.event.comment.body == 'recheck' \|\| github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') \|\| github.event_name == 'pull_request_target'
	uses: contributor-assistant/github-action@v2.3.0
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	PERSONAL_ACCESS_TOKEN: ${{ secrets.ZAP_CLA_PAT }}
	with:
	path-to-signatures: 'signatures/version1/cla.json'
	path-to-document: 'https://github.com/zaproxy/zaproxy/blob/main/CLA.md'
	# branch should not be protected
	branch: 'main'
	allowlist: zapbot,dependabot
	remote-organization-name: 'zaproxy'
	remote-repository-name: 'cla'

Provide feedback