Hi All, I found a PR https://github.com/apache/fineract/pull/6461 in which the commit is signed using an SSH key instead of gpg key. However, the check is failing. I think we can improve that. One more thing is that i think it would be better that instead of approval run we can make it run based on pull request target.
I have implemented similar check on fineract-backoffice-ui https://github.com/apache/fineract-backoffice-ui/pull/507 in which we can inform contributors automatically for signed commit as soon as they open PR. Regards, Aman
