Important: DCOBot Installation and Enforcement

[Jay Flowers]

Dear OSCAL Compass Community,

We are excited to announce that we will be installing the DCOBot into our GitHub organization to ensure all contributions comply with the Developer Certificate of Origin (DCO). This is an important step in protecting our open-source project and ensuring all code contributions are legitimate.

What to Expect:

• Installation: The DCOBot will be installed within the next 24 hours.
• Enforcement: DCO enforcement will be turned on after a 24-hour grace period to allow everyone time to adjust.
• Impact: Any pull requests submitted after the enforcement period will need to have a valid "Signed-off-by" line in each commit to be merged.

What is the DCO?

The DCO is a simple statement that you have the right to submit the code you are contributing to the project and agree to do so under the project's license. You can read more about the DCO and its guidelines here: https://github.com/cncf/foundation/blob/main/dco-guidelines.md

How to Sign Off:

• When committing your code, add the following line to your commit message:

  Signed-off-by: Your Name <your....@example.com>
  

  Replace "Your Name" and "your.email@example.com" with your actual name and email address.

More Information:

• You can learn more about the DCOBot app here: https://github.com/apps/dco

We appreciate your cooperation in making this transition smooth and ensuring the continued success of the OSCAL Compass project.

If you have any questions or concerns, please feel free to reach out to us.

Thank you,

The OSCAL Compass Team