Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [eclipse.org-architecture-council] [EXTERNAL] Re: Real names in git commit messages

I am somewhat more comfortable, but not 100% comfortable, with anonymized commits if people reveal their identities to a real person who can then vet them in some minimal way to make sure they are real. Otherwise, I'm rather uncomfortable with it.

With respect to raising eyebrows, this is a good way to get every Eclipse project listed as a security risk in some circles.

It is an issue that we discuss frequently at ORNL because our own GitHub community is littered with anonymous contributions and we have not yet addressed it. (It is the legacy of that community being open and wild.)

Jay

Jay Jay Billings, PhD
Group Leader, Research Software Engineering, Computer Science and Mathematics Division
Oak Ridge National Laboratory
Twitter Handle: @jayjaybillings

From: eclipse.org-architecture-council-bounces@xxxxxxxxxxx <eclipse.org-architecture-council-bounces@xxxxxxxxxxx> on behalf of Gunnar Wagenknecht <gunnar@xxxxxxxxxxxxxxx>
Sent: Wednesday, March 11, 2020 3:17 PM
To: eclipse.org-architecture-council <eclipse.org-architecture-council@xxxxxxxxxxx>
Subject: [EXTERNAL] Re: [eclipse.org-architecture-council] Real names in git commit messages
 
> On Mar 11, 2020, at 19:54, Jonah Graham <jonah@xxxxxxxxxxxxxxxx> wrote:
>
> Signed-off-by: Marcono1234 <Marcono1234@xxxxxxxxxxxxxxxxxxxxxxxx>
>
> Where Marcono1234 has signed ECA but doesn't want email address and real name published in open fashion.


This raises an interesting question. If Marcono1234@xxxxxxxxxxxxxxxxxxxxxxxx registers for an Eclipse account with that email and a random name he/she should be able to sign the ECA and the bot approves. That's why we still need committers to check. As a committer, I still think that I do not want anonymous contributors in my projects. That's not a trustworthy base of communication and collaboration in my opinion. I think this will also raises a lot eyebrows for a large adopter/consumer base.

I still think requiring a legal name is a good thing. I'll put the topic on the call agenda for tomorrow. :)

-Gunnar


_______________________________________________
eclipse.org-architecture-council mailing list
eclipse.org-architecture-council@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/eclipse.org-architecture-council

Back to the top