[jira] [Comment Edited] (NIFI-15377) Require Signed Commits for main Branch

["Daniel Stieglitz (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-15377?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18047090#comment-18047090 ] 

Daniel Stieglitz edited comment on NIFI-15377 at 12/22/25 6:35 PM:
-------------------------------------------------------------------

[~exceptionfactory] With this change, wouldn't it make sense to make mention of this need to sign one's commit when contributing in the [Contributor Guide|https://cwiki.apache.org/confluence/display/NIFI/Contributor+Guide]?


was (Author: JIRAUSER294662):
[~exceptionfactory] With this change, wouldn't it make sense to make mention of this the need to sign one's commit when contributing in the [Contributor Guide|https://cwiki.apache.org/confluence/display/NIFI/Contributor+Guide]?

> Require Signed Commits for main Branch
> --------------------------------------
>
>                 Key: NIFI-15377
>                 URL: https://issues.apache.org/jira/browse/NIFI-15377
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Tools and Build
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Major
>             Fix For: 2.8.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> The ASF YAML configuration for the primary project repository should be updated to require commit signing for the main branch. Requiring commit signing aligns with the configuration of the NiFi API repository and provides an additional level of security through signature verification status shown in the GitHub commit history.
> In addition to requiring commit signing, the ASF YAML configuration should be updated to limit supported merge operations to squash and merge, avoiding the other options which result in unnecessarily complex commit history.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)