Poster (After Call)

FZJ-2025-01846

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Inbound licensing with ease

Brömmel, D. (Corresponding author)FZJ* ; Speck, R.FZJ*

2025

This record in other databases:  

Please use a persistent id in citations: doi:10.5281/ZENODO.14945455  doi:10.34734/FZJ-2025-01846

Abstract: Managing projects with external collaborators sometimes comes with the burden of ensuring inbound contributions respect legal obligations. Where a low-level 'Developer Certificate of Origin (DCO)' approach only introduces certain checks, a 'Contributor License Agreements (CLAs)', on the other hand, relies on documenting signed CLAs and thus dedicated book-keeping.In this poster, we showcase our initial approach to a 'CLA Bot' that checks merge requests on compliance with either a DCO or CLA. While this is work in progress, our goal is to provide a similar functionality already available on Github also for community instances of Gitlab. We show the interaction between the bot and users, its limitations, and list steps taken for the automation via CI pipelines. Here, the somewhat simpler approach to pipelines in Gitlab vs Github necessitates working with webhooks that act on events within Gitlab. Our setup does not rely on a central server (in fact any additional server) and can be used by individual projects without having to share data. By using webhooks and CI pipelines, our approach can be used for similar automation tasks, offering the potential to interact with users.

---

Contributing Institute(s):

1. Jülich Supercomputing Center (JSC)

Research Program(s):

1. 5112 - Cross-Domain Algorithms, Tools, Methods Labs (ATMLs) and Research Groups (POF4-511) (POF4-511)

Appears in the scientific report 2025

---

Database coverage:

---