Re: [jira] [Commented] (LEGAL-156) Can we accept pull requests from github ?

[Daniel Shahaf <d....@daniel.shahaf.name>]

Marvin Humphrey (JIRA) wrote on Wed, Jan 16, 2013 at 13:58:12 +0000:
> 
>     [ https://issues.apache.org/jira/browse/LEGAL-156?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13555035#comment-13555035 ] 
> 
> Marvin Humphrey commented on LEGAL-156:
> ---------------------------------------
> 
> > (It would look to me like the only thing missing is that we have the process
> > picking up the pull requests actually attach the diff to the mail too, but
> > heck IANAL). 
> 
> While the dev list notification emails for pull requests do not include full
> diffs, they deliberately include the SHA checksums for each commit.  That
> ought to be good enough as a record of what was contributed.
> 
> With regards to documenting the intent of the contributor, only a pull request
> against one of the official mirrors at github.com/apache/* will trigger a dev
> list email notification AFAIK.  If you have one of those notifications in your
> email archives, that ought to suffice.

FWIW, relying on the pull request mail means relying on a third party
(github).  I wonder what's the simplest way to remove that trust ---
ideas range from pulling signed revisions to a trivial "I've merged your
pull request" mail CCed to the dev@ list.

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org