search

eclipse-tractusx / digital-product-pass

Eclipse Tractus-X Digital Product Pass - An application for visualizing Digital Product Passports, Battery Passports and Transmission Passports, it is the reference implementation of the EcoPass KIT
https://github.com/eclipse-tractusx/digital-product-pass
Apache License 2.0
24 stars 15 forks source link

[TRG 7.03] Clarify if an extra IP check for project content is needed at the end of the release #95

Closed matbmoser closed 1 year ago

matbmoser commented 1 year ago

Introduction

We need to clarify if we need to do a second IP check on our project content. It was performed in the last quality gate but we don't know if it needs to be performed again

matbmoser commented 1 year ago

I investigated about it and the short answer is "NO, an extra IP check is not required".

The explanation for that is the following:

There is a statement in the TRGs that state the following and applys for PRs:

Contributions made by Eclipse Tractus-X committers do not require review by the Eclipse IP Team and can be pushed directly into a project repository.

All the pull requests and new content that was added to the Tractus-X repository was merged by a commiter since the first IP check for the project made for the initial code contribution.

All the contributors signed the ECA and there is a requirement for that:

Contributions by Eclipse contributors (signed ECA) must be received via an Eclipse Foundation channel (e.g., GitHub pull request, attachment on an issue)

The PRs were revised in detail and me as a member from the core development team from this application can confirm that the code was 100% developed from scratch from us. I can also confirm that the DEPENDENCIES OSS checks are being made regularly and are always done before merging any PR that contains changes in the pom.xml or in any packege.json or packege-lock.json.

This requirement is already full filled and this issue can be closed.