DCO and Licensing

Dynamo requires every commit to include a Developer Certificate of Origin (DCO) sign-off. The sign-off certifies that you have the right to submit the contribution under the project’s Apache 2.0 License.

Create a Signed-off Commit

Configure your Git identity with the name and email you intend to use:

$
git config user.name "Your Name"
$
git config user.email "you@example.com"

Add the sign-off trailer with git commit -s:

$
git commit -s -m "fix(component): describe the change"

The resulting commit message ends with:

Signed-off-by: Your Name <you@example.com>

Use your real name. The trailer’s name and email must match the commit author identity.

Verify the Latest Commit

Display the complete commit message:

$
git show -s --format='%B' HEAD

Confirm that it contains the expected Signed-off-by line.

Verify Every Commit

Check all commits on your branch relative to upstream main:

$
git log --format='%h %s%n%(trailers:key=Signed-off-by)' upstream/main..HEAD

Each listed commit must have a sign-off trailer.

Repair the Latest Commit

If only the latest commit is missing its sign-off, amend it:

$
git commit --amend --signoff --no-edit
$
git push --force-with-lease

Amending changes the commit SHA. Use --force-with-lease, not --force, when updating a published branch.

Repair Multiple Commits

Start an interactive rebase that includes the unsigned commits:

$
git rebase -i upstream/main

Mark each unsigned commit as edit. For each stop, run:

$
git commit --amend --signoff --no-edit
$
git rebase --continue

After the rebase, verify every commit again, then update the remote branch:

$
git log --format='%h %s%n%(trailers:key=Signed-off-by)' upstream/main..HEAD
$
git push --force-with-lease

For additional recovery options, see the repository’s DCO troubleshooting guide.

Licensing

By contributing, you agree that your contribution is licensed under the Apache 2.0 License. All participation is also governed by the Code of Conduct.