[jira] [Commented] (LEGAL-491) Contributions from bots (Can robots sign CLAs?)

["Mark Thomas (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/LEGAL-491?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16972306#comment-16972306 ] 

Mark Thomas commented on LEGAL-491:
-----------------------------------

Bot submits a PR, committer reviews it an applies it. Done.

That sequence is really no different to:

Committer runs a tool, committer reviews local diff, committer commits it. Done.

I don't see a problem here. In both cases I'd recommend the committer notes in the commit message which tool/bot was being used.

Also in both cases, the responsibility to review the diff before commit lies with the committer and responsibility to review the commit once applied to the repo lies with all committers.

> Contributions from bots (Can robots sign CLAs?)
> -----------------------------------------------
>
>                 Key: LEGAL-491
>                 URL: https://issues.apache.org/jira/browse/LEGAL-491
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Ismaël Mejía
>            Priority: Major
>
> I am not clear if we have a recommendation on contributions ‘authored’ by bots in our projects.
> With the recent popularity of bots that open PRs to solve issues like formatting or to update dependencies. This is becoming a common dev practice made easier by tools like github‘s dependabot.
> I know that historically we have not allowed bots to write code into our repos which makes total sense in projects where commits happen without review, however in Commit-Then-Review based projects, this question could be worth discussion.
> I suppose that legally there could still be authorship issues, do you guys have any opinion or reference to previous discussions on this subject. I don’t know if one workaround would be to make the committer responsible in such case. Or even to pass the bot authorship to some designated author who can be responsible too. Any pointers?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org