Contributing (#882)

* added file CAA.md & added info in CONTRIBUTING.md

* first version of the caa-botyml

* typo

* I believe we shouldn't set a PAT as we're setting the file in the same repository

https://github.com/contributor-assistant/github-action/blob/master/README.md#6-adding-personal-access-token-as-a-secret
"This PAT should have repo scope and is only required if you have configured to store the signatures in a remote repository/organization."

* bump package version to latest

* change action name to what looks like it should have been

* fix some more things that were off according the documentation

---------

Co-authored-by: Andy Boschmans <andy@data-intuitive.com>

Author: hcannoodt

.github/workflows/caa-bot.yml

@@ -0,0 +1,32 @@
+name: "CAA Bot"
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, closed, synchronize]
+
+# explicitly configure permissions, in case your GITHUB_TOKEN workflow permissions are set to read-only in repository settings
+permissions:
+  actions: write
+  contents: write # this can be 'read' if the signatures are in remote repository
+  pull-requests: write
+  statuses: write
+
+jobs:
+  CLAAssistant:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "CAA Assistant"
+        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I agree to the Data Intuitive Contributor Assignment Agreement.') || github.event_name == 'pull_request_target'
+        uses: contributor-assistant/github-action@v2.6.1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+        with:
+          path-to-signatures: 'signatures/caa.json'
+          path-to-document: 'https://github.com/viash-io/viash/blob/main/CAA.md'
+          branch: 'main'
+          allowlist: 'dependabot[bot],github-actions[bot]'
+          custom-notsigned-prcomment: 'Thanks for your PR to Viash! 🚀<br><br>Before we can review and merge your code, we need you to accept our Contributor Assignment Agreement (CAA). This assigns the copyright of your contribution to Data Intuitive, while ensuring you retain a license to use your own code anywhere else.<br><br>📝 **How to proceed:**<br>1. Read our short agreement here: [CAA.md](https://github.com/viash-io/viash/blob/main/CAA.md)<br>2. Reply to this comment with the following exact phrase:<br><br>**I agree to the Data Intuitive Contributor Assignment Agreement.**'
+          custom-pr-sign-comment: 'I have read the Contributor Assignment Agreement and I hereby assign the copyright of my contributions to Data Intuitive.'
+          custom-allsigned-prcomment: 'All contributors have signed the CAA. Thank you! ✅'

CAA.md

@@ -0,0 +1,51 @@
+# Contributor Assignment Agreement
+
+**Viash – Data Intuitive**
+
+First off, thank you for considering contributing to Viash! We welcome community contributions and are excited to see how we can improve this tool together.
+
+To ensure that Data Intuitive can continue to manage, maintain, and legally protect the Viash project (and to simplify our intellectual property management), we require all contributors to formally assign the copyright of their contributions to Data Intuitive.
+
+Before we can review and merge your Pull Request, you must agree to the following terms. Our automated bot will ask you to confirm this on your first Pull Request.
+
+---
+
+## 1. Assignment of Copyright
+
+By submitting a Contribution (code, documentation, or other materials) to this repository, You hereby assign and transfer to Data Intuitive the entire right, title, and interest (including all rights of copyright) in and to Your Contributions. Data Intuitive becomes the sole owner of the intellectual property of these contributions.
+
+## 2. Representation of Originality
+
+You represent and guarantee that Your Contribution is Your original work and that You have the legal right to assign the copyright to Data Intuitive. If you are contributing on behalf of your employer, you represent that you have the authority to assign these rights on their behalf.
+
+## 3. License Back to You
+
+We don't want to restrict you from using your own brilliant work! Data Intuitive hereby grants You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to use, reproduce, prepare derivative works of, publicly display, publicly perform, and distribute the specific Contribution You submitted, for any purpose.
+
+## 4. Moral Rights
+
+To the extent permitted by applicable law, You waive all moral rights in Your Contribution in favor of Data Intuitive.
+
+## 5. No Warranty
+
+Unless required by applicable law or agreed to in writing, You provide Your Contributions on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND.
+
+## 6. Governing Law
+
+This Agreement is governed by the laws of Belgium. Any disputes arising from or related to this Agreement shall be subject to the exclusive jurisdiction of the courts of Mechelen, Belgium.
+
+---
+
+## How to Agree
+
+When you submit your first Pull Request, our bot will automatically comment on it.
+
+To accept this agreement, simply reply to the bot's comment with the exact following phrase:
+
+`I have read the Contributor Assignment Agreement and I hereby assign the copyright of my contributions to Data Intuitive.`
+
+Once you reply, the status check will pass, and our team will be notified to review your Pull Request. Thank you for making Viash better!
+
+---
+
+*Data Intuitive BV – [hello@data-intuitive.com](mailto:hello@data-intuitive.com)*

CONTRIBUTING.md

@@ -1,6 +1,10 @@
 # Contributing
 
-Welcome to the Viash project, and thank you for considering contributing! We are open to a variety of contributions, including documentation updates, bug fixes, new features, and more. By participating in this project, you agree to abide by our [Code of Conduct](CONDUCT.md).
+Welcome to the Viash project, and thank you for considering contributing! We are open to a variety of contributions, including documentation updates, bug fixes, new features, and more. 
+
+By participating in this project, you agree to abide by our [Code of Conduct](CONDUCT.md). 
+
+Additionally, to ensure we can legally manage and protect the Viash project, all contributors must agree to our [Contributor Assignment Agreement (CAA)](CAA.md). Our automated bot will prompt you to accept this agreement when you submit your first Pull Request.
 
 ## Getting started