| --signoff
would be appropriate use in this case as the committer is
directly involved with the delivery if the patch from the --author and
the --author has granted use of that work to the ASF by attaching the
patch to an issue within Jira at issues.apache.org.
Since contributors do not necessarily have an ICLA's on file the
committer is the one responsible for marking the work being committed as
"Submitted on behalf of a third-party: [named here]", see Apache ICLA
section 7. We currently comply with this with our commits having "Patch:
[named here]". As I am unaware of any other project doing this and it
is a change to how code is submitted back to the ASF we should bounce
off board/legal to cover all bases if we go down the path of an official
proposal and vote on this. Finally, if we do consider switching the author and using signing to note the committer then I think we need to look at using gpg signatures as well to validate that the commit has truly come from a trusted committer. This will add a number of additional steps for new committers and existing ones who do not have a gpg key created and published, currently we only have 6. -Jake References: - http://www.apache.org/dev/committers.html#applying-patches - http://www.apache.org/licenses/icla.pdf
|
- introduce --signoff ? Roger Meier
- Re: introduce --signoff ? Carl Yeksigian
- Re: Re: introduce --signoff ? Roger Meier
- Re: Re: introduce --signoff ? Evan Nemerson
- Re: introduce --signoff ? Jake Farrell



