This is a GitHub Action that ensures that your pull request titles match the Conventional Commits spec. Typically, this is used in combination with a tool like semantic-release to automate releases.
Used by: Electron · Vite · Excalidraw · Apache · Vercel · Microsoft · Firebase · AWS – and many more.
Valid pull request titles:
- fix: Correct typo
- feat: Add support for Node.js 18
- refactor!: Drop support for Node.js 12
- feat(ui): Add
Buttoncomponent
Note that since pull request titles only have a single line, you have to use
!to indicate breaking changes.
See Conventional Commits for more examples.
- If your goal is to create squashed commits that will be used for automated releases, you'll want to configure your GitHub repository to use the squash & merge strategy and tick the option "Default to PR title for squash merge commits".
- Add the action with the following configuration:
name: 'Lint PR' on: pull_request: types: - opened - reopened - edited # - synchronize (if you use required Actions) jobs: main: name: Validate PR title runs-on: ubuntu-slim permissions: pull-requests: read steps: - uses: amannn/action-semantic-pull-request@v6 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
This works for pull requests from forks too. See the event triggers documentation below for when you'd need pull_request_target instead.
Tip
To protect your workflows against a tag being moved to malicious code, you can pin the action to a full commit SHA, e.g. amannn/action-semantic-pull-request@<sha> # v6.x.x. Dependabot and Renovate keep such pins up to date.
The action works without configuration, however you can provide options for customization.
The following terminology helps to understand the configuration options:
feat(ui): Add `Button` component
^ ^ ^
| | |__ Subject
| |_______ Scope
|____________ Type
with: # Configure which types are allowed (newline-delimited). # These are regex patterns auto-wrapped in `^ $`. # Default: https://github.com/commitizen/conventional-commit-types types: | fix feat JIRA-\d+ # Configure which scopes are allowed (newline-delimited). # These are regex patterns auto-wrapped in `^ $`. scopes: | core ui JIRA-\d+ # Configure that a scope must always be provided. requireScope: true # Configure which scopes are disallowed in PR titles (newline-delimited). # For instance by setting the value below, `chore(release): ...` (lowercase) # and `ci(e2e,release): ...` (unknown scope) will be rejected. # These are regex patterns auto-wrapped in `^ $`. disallowScopes: | release [A-Z]+ # Configure additional validation for the subject based on a regex. # This example ensures the subject doesn't start with an uppercase character. subjectPattern: ^(?![A-Z]).+$ # If `subjectPattern` is configured, you can use this property to override # the default error message that is shown when the pattern doesn't match. # The variables `subject` and `title` can be used within the message. subjectPatternError: | The subject "{subject}" found in the pull request title "{title}" didn't match the configured pattern. Please ensure that the subject doesn't start with an uppercase character. # The GitHub base URL will be automatically set to the correct value from the GitHub context variable. # If you want to override this, you can do so here (not recommended). githubBaseUrl: https://github.myorg.com/api/v3 # If the PR contains one of these newline-delimited labels, the # validation is skipped. If you want to rerun the validation when # labels change, you might want to use the `labeled` and `unlabeled` # event triggers in your workflow. ignoreLabels: | bot ignore-semantic-pull-request # If you're using a format for the PR title that differs from the traditional Conventional # Commits spec, you can use these options to customize the parsing of the type, scope and # subject. The `headerPattern` should contain a regex where the capturing groups in parentheses # correspond to the parts listed in `headerPatternCorrespondence`. # See: https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-commits-parser#headerpattern headerPattern: '^(\w*)(?:\(([\w$.\-*/ ]*)\))?: (.*)$' headerPatternCorrespondence: type, scope, subject
For work-in-progress PRs you can typically use draft pull requests from GitHub. However, private repositories on the free plan don't have this option and therefore this action allows you to opt-in to using the special "[WIP]" prefix to indicate this state.
Example:
[WIP] feat: Add support for Node.js 18
This will prevent the PR title from being validated, and pull request checks will remain pending.
Attention: If you want to use this feature, you need to grant the statuses: write permission to the GitHub Action. This is because the action will set a commit status on the PR to keep it in a pending state while [WIP] is present in the PR title. Since pull requests from forks only receive a read-only token, this requires the pull_request_target trigger if you accept pull requests from forks.
name: 'Lint PR' jobs: main: name: Validate PR title runs-on: ubuntu-slim permissions: pull-requests: read statuses: write steps: - uses: amannn/action-semantic-pull-request@v6 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: wip: true
When using "Squash and merge" on a PR with only one commit, GitHub will suggest using that commit message instead of the PR title for the merge commit. As it's easy to commit this by mistake this action supports two configuration options to provide additional validation for this case.
# If the PR only contains a single commit, the action will validate that # it matches the configured pattern. validateSingleCommit: true # Related to `validateSingleCommit` you can opt-in to validate that the PR # title matches a single commit to avoid confusion. validateSingleCommitMatchesPrTitle: true
However, GitHub has introduced an option to streamline this behaviour, so using that instead should be preferred.
There are two events that can be used as triggers for this action, each with different characteristics:
pull_request(recommended): The workflow and its configuration are taken from the pull request's branch, so changes to them apply to the same PR. Pull requests from forks are supported too: they receive aGITHUB_TOKENwith read-only permissions, which is all the action needs to validate the title. Depending on your repository settings, runs for pull requests from first-time contributors need to be approved by a maintainer. Since the workflow file comes from the pull request, a contributor could change it to skip the check for their own PR, so treat it as a helper rather than a guarantee and check the title when merging.pull_request_target: The workflow and its configuration are taken from the default branch, and the token can have write permissions even for pull requests from forks. This is only needed for features that write to the pull request, like thewipstatus or commenting the error message. Since this trigger runs with elevated permissions, never check out or run code from the pull request in such a workflow. Also note that GitHub blockspull_request_targetby default in public repositories starting December 2, 2026, unless an Actions policy for your repository allows it.
Tip
If the workflow is required for merging, you need to ensure that the you add a trigger type for synchronize.
This will ensure that the check is ran on each new push as required workflows need to run on the lastest change.
- The outputs
type,scopeandsubjectare populated, except for if thewipoption is used. - The
error_messageoutput will be populated in case the validation fails.
An output can be used in other steps, for example to comment the error message onto the pull request.
Example
name: 'Lint PR' on: pull_request_target: types: - opened - edited permissions: pull-requests: write jobs: main: name: Validate PR title runs-on: ubuntu-slim steps: - uses: amannn/action-semantic-pull-request@v6 id: lint_pr_title env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - uses: marocchino/sticky-pull-request-comment@v2 # When the previous steps fails, the workflow would stop. By adding this # condition you can continue the execution with the populated error message. if: always() && (steps.lint_pr_title.outputs.error_message != null) with: header: pr-title-lint-error message: | Hey there and thank you for opening this pull request! 👋🏼 We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/) and it looks like your proposed title needs to be adjusted. Details: ``` ${{ steps.lint_pr_title.outputs.error_message }} ``` # Delete a previous comment when the issue has been resolved - if: ${{ steps.lint_pr_title.outputs.error_message == null }} uses: marocchino/sticky-pull-request-comment@v2 with: header: pr-title-lint-error delete: true