cla-assistant / cla-assistant

Contributor License Agreement assistant (CLA assistant)

Home Page:https://cla-assistant.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

CLA Assistant Unlinked -- All Data Missing

prestonvanloon opened this issue · comments

URL to the linked Repository or Organization

https://github.com/prysmaticlabs/prysm

Steps to reproduce the problem

  1. Wake up one day (I'm not sure when this started)
  2. Hear reports that CLA Assistant is no longer linked with the Prysm project
  3. Log into cla-assistant.io, no data is present. The branch protection checks for CLA assistant are gone in Github.

What is the expected result?

CLA assistant is linked to the prysm project with hundreds of contributors previously signed.

What happens instead?

Nothing is there :(

Any other information? (attach screenshot if possible)

Screenshot from 2023-07-24 09-46-50

Used browser and browser version?

Chrome

Any other tested browsers/devices(OK/FAIL):

Here's a link to a CLA assistant comment from a PR: prysmaticlabs/prysm#11698 (comment)

Clicking the CLA button shows an error of "Bad credentials"

Screenshot from 2023-07-24 09-54-09

commented

hi 👋,

I just checked and it seems that prysmaticlabs uses an org wide CLA and that indeed the associated token is no longer valid.

If you're an org owner (or ask your org owner) to login to cla-assistant.io and click on the want to link an org? in the setup CLA dialog:
image

After clicking that the org owner should be prompted to give some permissions for org-level CLAs and after giving them they should see the existing CLAs for the org again as well as CLA-assistant should be working again.

@Shegox Thank you!!! That resolved my problem. Is there anything we could do to prevent this from happening again or receive notification that it has become unlinked? We just happened to notice that it wasn't a requirement one day, but not sure how long it has been broken.

commented

At the moment not really, however a colleague is currently working on adding better support for GitHub App based authentification, which will make the authentification independent of an user account/permissions.

In addition to more quickly notice this, would be making the CLA-check a "required status checks". This way you would see directly when it fails and ensures that you can't merge a PR without a CLA-check.