conda / conda/cla

Update CLA process to match new requirements from NumFOCUS

Open
#1 3 comments 2 reactions 2 assignees Claimed by @kenodegard View on GitHub
Dominant language
No language data
Stars
0
Forks
2
PR merge metrics
No merged PRs in 30d

Description

### Checklist

- [X] I added a descriptive title
- [X] I searched open issues and couldn't find a duplicate

### What?

The CLA process under NumFOCUS will require keeping a `.cla_signers` file in every repo in the conda organization.

### Why?

Here's an excerpt from the new CLA (bold for noting):

> In case you're new to CLAs, this is rather standard procedure for larger projects.[ Django](https://www.djangoproject.com/foundation/cla/) and even[ Python](https://www.python.org/psf/contrib/contrib-form/) itself both use something similar.
>
> ## Process
>
> New contributors should complete the Conda Contributor License Agreement located[ here](https://conda.io/en/latest/contributing.html#conda-contributor-license-agreement). A signed contributor license agreement for a pull request author needs to be on file with NumFOCUS, Inc. for pull requests to be merged. **A record of signatories is kept in the .cla-signers file in the project root.**
>
> ## Individual Contributor License Agreement – Conda Code Organization
> In order to clarify the intellectual property license granted with Contributions from any person or entity, **all projects under the Conda Code Organization (“Conda”) must have a Contributor License Agreement (“Agreement”) on file that has been signed by each Contributor, indicating agreement to the license terms below for each project**. This license is for your protection as a Contributor as well as the protection of NumFOCUS, Inc. (“NumFOCUS”) as the legal entity of Conda, and Anaconda, Inc. (“Anaconda”); it does not change your rights to use your own Contributions for any other purpose. **This agreement applies to any current and all future Conda projects, including conda, conda-build, constructor, and associated projects under the Conda Code Organization.** While currently hosted on GitHub at [https://github.com/conda](https://github.com/conda), the project hosting site is subject to change at the sole discretion of Conda’s leadership as stated in their governance.

### User impact

Contributors must be able to sign the new CLA only once, enabling them to contribute to any of the projects under the conda organization.

### Goals

- [ ] Sunset Anaconda CLA process
- [ ] Start of NumFOCUS CLA process
- [ ] Update the community about the changes

### Tasks

- [x] Request old Anaconda CLAs
- [x] Upload Anaconda CLAs to NumFOCUS provided Google Drive
- [x] Get new Adobe Sign account
- [ ] Set up new Adobe Sign document @jezdez
- [ ] Set up workflow to inform CLA reviewers team (email? github issues?)
- [ ] Add [Conda Contributor License Agreement](https://docs.google.com/document/d/1R5SO7WSlfecFJAclnw_0Q-lIEGxyAVZ3ucCFh6l4VYE/edit#heading=h.eefe1wqzas6) to the first level documentation page (or conda.org?) as the new definite information about the CLA @jezdez @kathatherine
- [x] Create `conda/cla` repo to store CLA legal documents (and version them etc, link back to original files in Google Docs) @jezdez
- [ ] Require contributor to sign the PDF hosted under the NumFOCUS Adobe Sign account
- [ ] Open a PR in `conda/cla` that adds the contributor to the central `cla/signers.json`
- Automatically assigns the PR to the `CLA reviewer` team
- [ ] Copy the updated `cla/signers.json` file to all repos under the conda organization
- The mode of copying can either be push as-is, or by pull via https://github.com/conda/actions/pull/127
- [ ] Clean out old CLA update PRs
- [ ] Write blog post announcing change in process

### This epic is blocked by:

- [x] https://github.com/conda/actions/pull/127
- [x] https://github.com/conda/governance/issues/136

### This epic blocks:

- [ ] https://github.com/conda/conda-docs/issues/931

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.