From ae8b3721bfa5edf0c0982fcb1692995bb25a8c60 Mon Sep 17 00:00:00 2001
From: Henrik Brix Andersen <henrik@brixandersen.dk>
Date: Tue, 28 Jul 2026 10:50:40 +0000
Subject: [PATCH] github: workflows: add developer sign-off validation workflow

Add workflow for validating the developer sign-off on pull request commits.

Since parts of the CANnectivity code has the potential of being upstreamed
into the Zephyr main tree at some point, reuse the DCO check from upstream
Zephyr.

Signed-off-by: Henrik Brix Andersen <henrik@brixandersen.dk>
---
 .github/workflows/dco.yml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 .github/workflows/dco.yml

diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml
new file mode 100644
index 0000000..aa30d92
--- /dev/null
+++ b/.github/workflows/dco.yml
@@ -0,0 +1,32 @@
+# SPDX-FileCopyrightText: Copyright The Zephyr Project Contributors
+# SPDX-License-Identifier: Apache-2.0
+
+name: DCO Check
+
+on: [pull_request]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  dco-check:
+    name: Check developer sign-off
+    runs-on: ubuntu-24.04
+    # The sign-off check for dependabot should be skipped
+    if: github.actor != 'dependabot[bot]'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          # Full history and the PR head so the action can resolve the base
+          # branch and merge-base (see actions/checkout#552).
+          fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha }}
+          persist-credentials: false
+
+      - name: Check commit sign-off
+        uses: zephyrproject-rtos/action-dco@e3485a11e085fdc05fa4320e9cc3a86ccd665d89 # v1.0.0