klesh commented on issue #5862: URL: https://github.com/apache/incubator-devlake/issues/5862#issuecomment-1676557390
It is good practice and I'm fine with it myself. However, from what I can tell, most developers do not familiar with GPG and signing commits, it would be quite a learning curve, especially when most of our contributors are using macOS or Windows...🥲 I think it is fine not to sign the commits since we are reviewing every PRs and honestly, author forgery is not a problem so far. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
