Address missing DCO signoffs

[jmertic]

I did an audit and see that we have a ton of missing DCO signoffs. Need to work on addressing

1) Handle signoffs of past commits 2) Ensure all new repos have branch protection on for commits. 3) Make sure we aren't setting DCO checks to pass

@hogstrom Can we discuss at the next ZLC meeting?

Zowe DCO audit.xlsx

[hogstrom]

@jmertic is this completed yet?

[jmertic]

Sorry - I forgot you had given me the green light after the last ZLC meeting.

I will send out signoff texts to contributors today to commit.

[jmertic]

Started rolling this out now. We have a ton of signoffs needing done so I'm doing this in phases.

[jmertic]

So I've attached the latest report - we are still seeing a fair number of commits coming in without a DCO. I also see that some of the signoffs are sitting on non-release branches and need to make their way to master.

I'm concerned that committers are bypassing the signoff still. How can we address this?

zowe.csv.txt

[jmertic]

We are still seeing both past issues and issues on commits moving forward on DCO compliance. See attached...

zowe-dco-scan-20190815.csv.txt

It seems that those with write access are still bypassing DCO checks ( details at how on https://github.com/probot/dco#how-it-works ). We need to improve enforcement on this.

Please add this to the next ZLC agenda @hogstrom

[hogstrom]

This is now part of a continuous improvement process. New issues should be opened for discussion on this topic if needed.

[jmertic]

What is the issue or project for that? This issue still remains unresolved.

On Wed, Sep 18, 2019 at 8:47 AM Matt Hogstrom notifications@github.com wrote:

This is now part of a continuous improvement process. New issues should be opened for discussion on this topic if needed.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/zowe/zlc/issues/95?email_source=notifications&email_token=AACIOIIG5GEJWXRSI3U22OTQKIPNRA5CNFSM4HJO7DI2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD67564A#issuecomment-532668272, or mute the thread https://github.com/notifications/unsubscribe-auth/AACIOINGPIVA5OC6LAB3R33QKIPNRANCNFSM4HJO7DIQ .

-- Thank you,

John Mertic Director of Program Management - Linux Foundation ASWF, ODPi, and Open Mainframe Project jmertic@linuxfoundation.org +1 234-738-4571 Schedule time with me at https://calendly.com/jmertic

[jmertic]

Attached latest report - lots of sign offs still missing.

zowe-dco-scan-20190918.csv.txt

[armstro]

@jmertic we are trying to clean up ZLC issues backlog - question was whether this has been addressed or if there is need for another audit to check compliance ......please advise

[jmertic]

It's still an issue and continues to be so. Let's keep open and I'll rescan to capture where we are.

[PeterFandelAtRocket]

Closed