Bug Description
The current contribution process allows contributor information to be manually supplied without automated validation which can lead to :
- Duplicate contributor entries.
- Username mismatches.
- Incorrect attribution.
- Data integrity issues.
Current Behavior
Contributor information is accepted without validation against the PR author.
proposed solution
Implement a GitHub Action that:
- Retrieves PR author information.
- Validates submitted GitHub usernames.
- Detects duplicates.
- Rejects malformed contributor entries.
Steps To Reproduce
Scenario 1: Mismatched GitHub Username
- Fork the repository.
- Create a new branch.
- Modify the contributor section by adding an entry using a GitHub username that does not belong to the contributor submitting the PR.
- Fill out the Pull Request template and provide a different GitHub username in the "GitHub Profile" field.
- Submit the Pull Request.
Expected Behavior
The workflow should automatically verify that:
- The submitted GitHub username matches the Pull Request author.
- Contributor information is valid before review.
Screenshots or Additional Context
Benefits
Preserves contributor data integrity.
Prevents duplicate records.
Improves automation reliability.
Impact Level
Level 3 – Security / Integrity Issue
Files Potentially Affected
.github/workflows/*
PULL_REQUEST_TEMPLATE.md
README.md
CONTRIBUTORS.md
Bug Description
The current contribution process allows contributor information to be manually supplied without automated validation which can lead to :
Current Behavior
Contributor information is accepted without validation against the PR author.
proposed solution
Implement a GitHub Action that:
Steps To Reproduce
Scenario 1: Mismatched GitHub Username
Expected Behavior
The workflow should automatically verify that:
Screenshots or Additional Context
Benefits
Impact Level
Level 3 – Security / Integrity Issue
Files Potentially Affected