feat: DCO - enable remediation commits - #413
Merged
lornakelly merged 1 commit intoSep 11, 2026
Merged
Conversation
Signed-off-by: lornakelly <lornakelly88@gmail.com>
✅ Deploy Preview for openworkflow-editor canceled.
|
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The change is a small, well-scoped configuration addition that matches the linked issue requirements and introduces no code-path risk.
Pull request overview
Adds configuration for the CNCF DCO GitHub App to allow individual remediation commits, enabling contributors to retroactively add a valid Signed-off-by for a specific prior commit (by full SHA) without rewriting history—addressing DCO failures caused by GitHub “Squash and merge” re-authoring.
Changes:
- Introduces
.github/dco.ymlenablingallowRemediationCommits.individual: true. - Documents (in-file comments) the rationale tied to squash-merge author/sign-off mismatches.
File summaries
| File | Description |
|---|---|
.github/dco.yml |
Adds DCO App configuration to enable individual remediation commits. |
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
lornakelly
requested review from
fantonangeli,
handreyrc and
kumaradityaraj
September 10, 2026 15:39
handreyrc
approved these changes
Sep 10, 2026
fantonangeli
approved these changes
Sep 11, 2026
lornakelly
merged commit Sep 11, 2026
aa3b80d
into
open-workflow-specification:main
12 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Closes #412
Add a
.github/dco.ymlconfiguration file for the DCO GitHub App that enables individual remediation commits (see docs https://github.com/cncf/dco2#remediation-commits)This lets a contributor retroactively add a Signed-off-by for one of their own commits via a follow-up commit that names the target commit by full SHA, instead of rewriting history.
"Squash and merge" writes a brand-new commit and stamps its author from the contributor's GitHub account - their display name, and their account email- while copying the Signed-off-by trailer verbatim from the original local commit. Where those identities differ in either the name or the email, the resulting commit's sign-off no longer matches its own author, and it fails the DCO check the next time that commit turns up inside a pull request's commit range.
Enabling individual remediation gives a contributor a way to repair their own sign-off in place.