For the open source projects I manage related to $DAYJOB, we require DCO signoffs using the `Signed-off-by` signature in commits. https://developercertificate.

For the open source projects I manage related to $DAYJOB, we require DCO signoffs using the `Signed-off-by` signature in commits. https://developercertificate.org https://developercertificate.org (We have a GitHub action that verifies this, based on another action, based on something by Probot. Ours has been modified to allow automatic DCO certification for people from the company.)