Repository navigation
ci: gate PRs on Actions and bridge to Blossom #7
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. | |
| # SPDX-License-Identifier: Apache-2.0 | |
| # | |
| # Checks on the pull request itself rather than its diff: the title, which | |
| # becomes the squashed commit subject, and the sign-off CONTRIBUTING.md | |
| # requires on every commit. | |
| name: Pull request | |
| on: | |
| pull_request: | |
| # `edited` so retitling a PR re-runs the title check; without it a rejected | |
| # title stays red after the author fixes it. | |
| types: [opened, edited, reopened, synchronize] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| title: | |
| name: Title | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: ./.github/actions/prek | |
| # Through the environment, never interpolated into the script: a PR title | |
| # is untrusted input and `${{ }}` expands before bash ever sees it. | |
| # https://docs.github.com/actions/security-guides/security-hardening-for-github-actions | |
| - env: | |
| PR_TITLE: ${{ github.event.pull_request.title }} | |
| run: .github/scripts/check-pr-title.sh "${PR_TITLE}" | |
| dco: | |
| name: DCO | |
| runs-on: ubuntu-latest | |
| steps: | |
| # The full history. The check walks the range this branch adds to the | |
| # base, and a shallow clone carries neither end of it. The default ref is | |
| # the merge commit, whose parents are exactly the two SHAs below, so both | |
| # are present without asking for either by name. | |
| - uses: actions/checkout@v7 | |
| with: | |
| fetch-depth: 0 | |
| - env: | |
| BASE_SHA: ${{ github.event.pull_request.base.sha }} | |
| HEAD_SHA: ${{ github.event.pull_request.head.sha }} | |
| run: .github/scripts/check-dco.sh "${BASE_SHA}" "${HEAD_SHA}" |