Wolfgang Schnerring <ws@gocept.com> writes:
* Lennart Regebro <regebro@gmail.com> [2012-08-19 13:01]:
On Sun, Aug 19, 2012 at 10:30 AM, Jens Vagelpohl <jens@dataflake.org> wrote: As far as I understand it, the legal lynchpin is that using Github (strongly) encourages merging code contributions of people that did not sign a contributor agreement -- which is the same situation as if someone attaches a patch file to a bug tracker ticket, but will be much more frequent and likely to happen.
Could we, then, adopt a policy that we only merge pull requests (or whathaveyou) from people that have signed a contributor agreement? a) Tres, Jens: Would that work from a legal perspective? b) Ross, Alex: Would that still yield the advantages of the distributed source control model?
+10 Absolutely, seems like the best way to do this is to use the existing zopefoundation github org and ensure that we only add members with merge/push permission that have signed the agreement. https://github.com/zopefoundation Ross