MATTER-5424 : enable CLA

.github/workflows/01-CLA-Assistant.yml

@@ -1,32 +1,33 @@
-name: 01-CLA-Assistant
-## This workflow is used for public repositories
+name: CLA validation
 
 on:
-  workflow_dispatch:
- #issue_comment:
- #  types: [created]
- #pull_request_target:
- #  types: [opened,closed,synchronize,reopened]
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, synchronize, reopened]
 
 permissions:
   actions: write
-  contents: read # this can be 'read' if the signatures are in remote repository
+  contents: read 
   pull-requests: write
   statuses: write
 
 jobs:
   CLAAssistant:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
       - name: Create CLA Assistant Lite bot token
         uses: actions/create-github-app-token@v2
         id: app-token
         with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          app-id: ${{ secrets.SILABSIN_CLA_BOT_APP_ID }}
+          private-key: ${{ secrets.SILABSIN_CLA_BOT_APP_PRIVATE_KEY }}
           owner: SiliconLabsInternal
           repositories: contributor-license-agreements
 
+      - name: Mask generated token
+        run: echo "::add-mask::${{ steps.app-token.outputs.token }}"
+
       - name: "CLA Assistant"
         if: ${{ contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA') }} || github.event_name == 'pull_request_target'
         uses: SiliconLabsSoftware/action-cla-assistant@silabs_flavour_v2
@@ -42,4 +43,4 @@ jobs:
           remote-organization-name: "SiliconLabsInternal"
           remote-repository-name: "contributor-license-agreements"
           create-file-commit-message: "Created the CLA database file. CLA Assistant Lite bot created this file."
-          signed-commit-message: "$contributorName has signed the CLA in $owner/$repo#$pullRequestNo"
+          signed-commit-message: "$contributorName has signed the CLA in $owner/$repo#$pullRequestNo"