Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 596684 - Neither repoman nor git hooks pick up that commits are not using @gentoo.org addresses.
Summary: Neither repoman nor git hooks pick up that commits are not using @gentoo.org ...
Status: RESOLVED WONTFIX
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Repoman (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-10-09 13:10 UTC by Diego Elio Pettenò (RETIRED)
Modified: 2022-07-12 03:18 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Diego Elio Pettenò (RETIRED) gentoo-dev 2016-10-09 13:10:02 UTC
Assigning to Robin for triaging, he has some context. See https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8696623f2b2bda34437e4ebe211f458af437299d
Comment 1 Michael Palimaka (kensington) gentoo-dev 2016-10-09 14:43:43 UTC
I agree it makes sense to enforce devs using their @gentoo.org address, but we should also consider proxied commits where the author will never have such an address. Such attribution is important - see https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=55930580cbadf421a65488447e45c78304230a72 for example.
Comment 2 Brian Dolbec (RETIRED) gentoo-dev 2016-10-09 19:44:24 UTC
This is part of GLEP 63 which is not being enforced yet.  And sadly not very many devs have made new keys that do meet the glep.  Some have as well as some that have fixed their existing key to meet the glep.

Last I heard, Robin still had not gotten the hardware to hold infra gpg keys securely.  Once that was done, we were going to give a deadline to bring their gpg keys up to glep spec for acceptance.
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-12 03:18:28 UTC
repoman support has been removed per bug 835013.

Please file a new bug (or, I suppose, reopen this one) if you feel this check is still applicable to pkgcheck and doesn't already exist.