[QGIS-Developer] Requiring signed commits?

[Greg Troxel]

Régis Haubourg via QGIS-Developer <qgis-developer at lists.osgeo.org>
writes:

> On the security and PSC channel, I already spotted some IT departments
> asking for our current security practices. And one of them
> specifically asked for signed commits.
> I guess this will only increase.

Maybe adopt a policy that only bronze-level sponsors can ask questions
and get sent notes about practices?