From 09bc8b870ad25b8c8845aec8a072ecc4106f92e9 Mon Sep 17 00:00:00 2001
From: Sarthak Shaha <sarthak.shaha@silabs.com>
Date: Thu, 11 Sep 2025 11:18:31 -0400
Subject: [PATCH 1/3] enable CLA

---
 .github/workflows/01-CLA-Assistant.yml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/01-CLA-Assistant.yml b/.github/workflows/01-CLA-Assistant.yml
index c0104fa..c786a05 100644
--- a/.github/workflows/01-CLA-Assistant.yml
+++ b/.github/workflows/01-CLA-Assistant.yml
@@ -1,22 +1,19 @@
-name: 01-CLA-Assistant
-## This workflow is used for public repositories
+name: CLA validation
 
 on:
-  workflow_dispatch:
- #issue_comment:
- #  types: [created]
- #pull_request_target:
- #  types: [opened,closed,synchronize,reopened]
+  issue_comment:
+    types: [created]
+  pull_request:
 
 permissions:
   actions: write
-  contents: read # this can be 'read' if the signatures are in remote repository
+  contents: read
   pull-requests: write
   statuses: write
 
 jobs:
   CLAAssistant:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
       - name: Create CLA Assistant Lite bot token
         uses: actions/create-github-app-token@v2
@@ -27,6 +24,9 @@ jobs:
           owner: SiliconLabsInternal
           repositories: contributor-license-agreements
 
+      - name: Mask generated token
+        run: echo "::add-mask::${{ steps.app-token.outputs.token }}"
+
       - name: "CLA Assistant"
         if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request_target'
         uses: SiliconLabsSoftware/action-cla-assistant@silabs_flavour_v2

From 892ba9d32effbe03efa4a5fa3ab13fb533dbc387 Mon Sep 17 00:00:00 2001
From: Sarthak Shaha <sarthak.shaha@silabs.com>
Date: Tue, 16 Sep 2025 22:56:33 -0400
Subject: [PATCH 2/3] use pull_request

---
 .github/workflows/01-CLA-Assistant.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/01-CLA-Assistant.yml b/.github/workflows/01-CLA-Assistant.yml
index c786a05..2a2b943 100644
--- a/.github/workflows/01-CLA-Assistant.yml
+++ b/.github/workflows/01-CLA-Assistant.yml
@@ -28,7 +28,7 @@ jobs:
         run: echo "::add-mask::${{ steps.app-token.outputs.token }}"
 
       - name: "CLA Assistant"
-        if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request_target'
+        if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request'
         uses: SiliconLabsSoftware/action-cla-assistant@silabs_flavour_v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

From 455a66d62aedc786dd4c48d74d9c48b53ec526de Mon Sep 17 00:00:00 2001
From: Sarthak Shaha <sarthak.shaha@silabs.com>
Date: Wed, 17 Sep 2025 13:06:07 -0400
Subject: [PATCH 3/3] use pull_request_target

---
 .github/workflows/01-CLA-Assistant.yml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/01-CLA-Assistant.yml b/.github/workflows/01-CLA-Assistant.yml
index 2a2b943..0bdcd46 100644
--- a/.github/workflows/01-CLA-Assistant.yml
+++ b/.github/workflows/01-CLA-Assistant.yml
@@ -3,11 +3,12 @@ name: CLA validation
 on:
   issue_comment:
     types: [created]
-  pull_request:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
 
 permissions:
   actions: write
-  contents: read
+  contents: read 
   pull-requests: write
   statuses: write
 
@@ -19,8 +20,8 @@ jobs:
         uses: actions/create-github-app-token@v2
         id: app-token
         with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          app-id: ${{ secrets.SILABSIN_CLA_BOT_APP_ID }}
+          private-key: ${{ secrets.SILABSIN_CLA_BOT_APP_PRIVATE_KEY }}
           owner: SiliconLabsInternal
           repositories: contributor-license-agreements
 
@@ -28,7 +29,7 @@ jobs:
         run: echo "::add-mask::${{ steps.app-token.outputs.token }}"
 
       - name: "CLA Assistant"
-        if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request'
+        if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request_target'
         uses: SiliconLabsSoftware/action-cla-assistant@silabs_flavour_v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -42,4 +43,4 @@ jobs:
           remote-organization-name: "SiliconLabsInternal"
           remote-repository-name: "contributor-license-agreements"
           create-file-commit-message: "Created the CLA database file. CLA Assistant Lite bot created this file."
-          signed-commit-message: "$contributorName has signed the CLA in $owner/$repo#$pullRequestNo"
+          signed-commit-message: "$contributorName has signed the CLA in $owner/$repo#$pullRequestNo"
\ No newline at end of file