Re: CLA signing automation

Jason Plurad <plu...@...>

+1 I agree that the CLA process needs to be improved.

Currently CLAs are submitted to the janusgraph-cla Google Group which is monitored by Misha and me. A representative from the Linux Foundation is also in the group to observe. The group archive provides the historical record of the signed CLA documents.

I have been a bit removed from the JanusGraph community over the past few months for personal issues, but as a community supported project, the absence of any particular members should not prevent the community from moving forward.

Some steps that I propose we take in the short term:
* All PMC members given access to the janusgraph-cla group so that any PMC member can handle incoming CLAs
* Update the Contributing documentation to help eliminate the common follow up questions around ICLA vs CCLA. This mostly consists of ensuring that an individual contributor has verified that their employer/university/organization is aware of the contributions and will not make any claims on the submitted contributions.

Long term, if we can take advantage of some of the Linux Foundation infrastructure to handle or automate this, that would be fantastic. JanusGraph was created as a "lightweight project", so the support the project has received from the LF has been minimal. My understanding is that the marquee projects (like Kubernetes, CNFC, ODPi) have more sponsor money involved, so they have access to nice things.

Thank you Oleksandr and Florian for starting up this thread. If anybody else is interested in helping to push this topic forward, please reply on this thread.


On Friday, February 8, 2019 at 12:49:52 PM UTC-5, Oleksandr Porunov wrote:

I like the automation method you suggested. I would go for it.
Do you know who should we contact to setup it? I assume either Jason Plurad or Misha Brukman should have necessary rights?

On Friday, February 8, 2019 at 4:19:10 PM UTC+2, Florian Hockmann wrote:
Thanks for bringing this up, Oleksandr. I agree that it's important to make this process easier for contributors as each additional loop they have to jump through could prevent them from contributing to JanusGraph in the first place.

Apparently, Kubernetes has automated its CLA workflow. They are hosted within the Cloud Native Computing Foundation (CNCF) but it seems to use only infrastructure from the Linux Foundation and since the CNCF is also a Linux Foundation project, we should be able to use the same system in general.
They also have docs on how to set up the automation for a new repo. At first glance, it looks like we only need a JanusGraph group for

While we're at it we could also automate the DCO check with a DCO bot. We currently have to check this manually while reviewing a PR which we tend to forget sometimes.

Am Freitag, 8. Februar 2019 08:16:31 UTC+1 schrieb Oleksandr Porunov:

I have a concern about current CLA signing workflow. Currently we need to print a CLA agreement then fill it, then scan it then send it via email and then wait for an unknown amount of time while it is checked then wait while the PR with your signing details is merged into
It causes very huge delays sometimes more than 1 month. I think it is a big disadvantage for accepting new contributions.

I think we would be able to use either Google form for CLA accepting like this one:

Or maybe use some tool for CLA automation like this one:

There are a lot of CLA automation tools. I think we could use some.

Can we automate this process to digitally sign CLAs or we need real scanned paper copy?

Join to automatically receive all group messages.