Clarify how Derek works with DCO sign-off messages

Signed-off-by: Alex Ellis (OpenFaaS Ltd) <alexellis2@gmail.com>
alexellis · Apr 11, 2023 · cccb160 · cccb160
1 parent 08d2bff
commit cccb160
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -32,7 +32,9 @@ git commit --global user.email "you@example.com"
 git commit -s / --signoff
 ```
 
-This is not cryptography, does not require any keys and does not take any longer than typing in the above three
+We do not expect to contact you in relation to your contributions, however a real, genuine email address must be used which is contactable. A no-reply email address will result in the DCO being marked as invalid by Derek, the DCO bot we use.
+
+This is not cryptography (GPG commit signing), does not require any keys and does not take any longer than typing in the above three
 commands.
 
 ### Recommended settings for apps for `arkade install`