From f6b8344b4e519f964d8884d6f60b57991f3f4993 Mon Sep 17 00:00:00 2001 From: Eric Traut Date: Sat, 3 Jan 2026 12:31:28 -0700 Subject: [PATCH] Added contributing guidelines, content license agreement, and CLA bot (#30) The CLA and CLA workflow were copied verbatim from the openai/codex repo. The contributing guidelines are a stripped-down version of that in the openai/codex repo. --------- Co-authored-by: Josh McKinney --- .github/workflows/cla.yml | 49 +++++++++++++++++++++++++++++++++++++++ CLA.md | 49 +++++++++++++++++++++++++++++++++++++++ contributing.md | 26 +++++++++++++++++++++ 3 files changed, 124 insertions(+) create mode 100644 .github/workflows/cla.yml create mode 100644 CLA.md create mode 100644 contributing.md diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml new file mode 100644 index 0000000..2f59f58 --- /dev/null +++ b/.github/workflows/cla.yml @@ -0,0 +1,49 @@ +name: CLA Assistant +on: + issue_comment: + types: [created] + pull_request_target: + types: [opened, closed, synchronize] + +permissions: + actions: write + contents: write + pull-requests: write + statuses: write + +jobs: + cla: + # Only run the CLA assistant for the canonical openai repo so forks are not blocked + # and contributors who signed previously do not receive duplicate CLA notifications. + if: ${{ github.repository_owner == 'openai' }} + runs-on: ubuntu-latest + steps: + - uses: contributor-assistant/github-action@v2.6.1 + # Run on close only if the PR was merged. This will lock the PR to preserve + # the CLA agreement. We don't want to lock PRs that have been closed without + # merging because the contributor may want to respond with additional comments. + # This action has a "lock-pullrequest-aftermerge" option that can be set to false, + # but that would unconditionally skip locking even in cases where the PR was merged. + if: | + ( + github.event_name == 'pull_request_target' && + ( + github.event.action == 'opened' || + github.event.action == 'synchronize' || + (github.event.action == 'closed' && github.event.pull_request.merged == true) + ) + ) || + ( + github.event_name == 'issue_comment' && + ( + github.event.comment.body == 'recheck' || + github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA' + ) + ) + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + with: + path-to-document: https://github.com/openai/skills/blob/main/docs/CLA.md + path-to-signatures: signatures/cla.json + branch: cla-signatures + allowlist: codex,dependabot,dependabot[bot],github-actions[bot] diff --git a/CLA.md b/CLA.md new file mode 100644 index 0000000..804f202 --- /dev/null +++ b/CLA.md @@ -0,0 +1,49 @@ +# Individual Contributor License Agreement (v1.0, OpenAI) + +_Based on the Apache Software Foundation Individual CLA v 2.2._ + +By commenting **“I have read the CLA Document and I hereby sign the CLA”** +on a Pull Request, **you (“Contributor”) agree to the following terms** for any +past and future “Contributions” submitted to the **OpenAI Codex CLI project +(the “Project”)**. + +--- + +## 1. Definitions + +- **“Contribution”** – any original work of authorship submitted to the Project + (code, documentation, designs, etc.). +- **“You” / “Your”** – the individual (or legal entity) posting the acceptance + comment. + +## 2. Copyright License + +You grant **OpenAI, Inc.** and all recipients of software distributed by the +Project a perpetual, worldwide, non‑exclusive, royalty‑free, irrevocable +license to reproduce, prepare derivative works of, publicly display, publicly +perform, sublicense, and distribute Your Contributions and derivative works. + +## 3. Patent License + +You grant **OpenAI, Inc.** and all recipients of the Project a perpetual, +worldwide, non‑exclusive, royalty‑free, irrevocable (except as below) patent +license to make, have made, use, sell, offer to sell, import, and otherwise +transfer Your Contributions alone or in combination with the Project. + +If any entity brings patent litigation alleging that the Project or a +Contribution infringes a patent, the patent licenses granted by You to that +entity under this CLA terminate. + +## 4. Representations + +1. You are legally entitled to grant the licenses above. +2. Each Contribution is either Your original creation or You have authority to + submit it under this CLA. +3. Your Contributions are provided **“AS IS”** without warranties of any kind. +4. You will notify the Project if any statement above becomes inaccurate. + +## 5. Miscellany + +This Agreement is governed by the laws of the **State of California**, USA, +excluding its conflict‑of‑laws rules. If any provision is held unenforceable, +the remaining provisions remain in force. diff --git a/contributing.md b/contributing.md new file mode 100644 index 0000000..c0d3511 --- /dev/null +++ b/contributing.md @@ -0,0 +1,26 @@ +## Contributing + +### Community values + +- **Be kind and inclusive.** Treat others with respect; we follow the [Contributor Covenant](https://www.contributor-covenant.org/). +- **Assume good intent.** Written communication is hard - err on the side of generosity. +- **Teach & learn.** If you spot something confusing, open an issue or PR with improvements. + +### Contributor license agreement (CLA) + +All contributors **must** accept the CLA. The process is lightweight: + +1. Open your pull request. +2. Paste the following comment (or reply `recheck` if you've signed before): + + ```text + I have read the CLA Document and I hereby sign the CLA + ``` + +3. The CLA-Assistant bot records your signature in the repo and marks the status check as passed. + +No special Git commands, email attachments, or commit footers required. + +### Security & responsible AI + +Have you discovered a vulnerability or have concerns about model output? Please e-mail **security@openai.com** and we will respond promptly.