Enforce DCO

Author: s3rj1k

.github/workflows/dco.yaml

@@ -8,6 +8,7 @@ on:
 
 permissions:
   contents: read
+  actions: write
 
 jobs:
   check:
@@ -34,8 +35,40 @@ jobs:
             'https://raw.githubusercontent.com/christophebedard/dco-check/${{ env.DCO_CHECK_VERSION }}/dco_check/dco_check.py'
 
       - name: Run DCO check
+        id: dco-check
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           DCO_CHECK_VERBOSE: "true"
           DCO_CHECK_EXCLUDE_PATTERN: dependabot\[bot\]@users\.noreply\.github\.com
         run: python3 dco_check.py
+
+      - name: Cancel workflows on DCO failure
+        if: failure() && steps.dco-check.outcome == 'failure'
+        uses: actions/github-script@v8
+        with:
+          script: |
+            const currentRunId = context.runId;
+            const prNumber = context.payload.pull_request.number;
+
+            // Get both queued and in_progress workflows
+            for (const status of ['queued', 'in_progress']) {
+              const runs = await github.rest.actions.listWorkflowRunsForRepo({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                event: 'pull_request',
+                status: status,
+              });
+
+              for (const run of runs.data.workflow_runs) {
+                // Cancel workflows for the same PR, but not this DCO workflow itself
+                if (run.id !== currentRunId &&
+                    run.pull_requests.some(pr => pr.number === prNumber)) {
+                  console.log(`Cancelling ${status} workflow run ${run.id} (${run.name})`);
+                  await github.rest.actions.cancelWorkflowRun({
+                    owner: context.repo.owner,
+                    repo: context.repo.repo,
+                    run_id: run.id,
+                  });
+                }
+              }
+            }