Switch to DCO / Add DCO bot

[greghaynes]

Feature Description

Problem Statement: We have a PR template which includes the language "By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.". Presumably, this is to cover the same risk which DCO can address. Furthermore, there is no automation to verify this check, meaning its up to a reviewer to ensure this text exists in each PR.

Proposed Solution: Add the GitHub DCO bot to this project to enforce that all commits include necessary attestation for DCO. This aligns with wider CNCF and other OSS practices, while also giving us an enforcement mechanism for this attestation.

Alternatives Considered:

Additional Context:

• Please vote on this issue by adding a 👍 reaction to the original issue
• If you are interested in working on this feature, please leave a comment

[a-hilaly]

Agreed, it's better to automate these with a github bot+++

[greghaynes]

I'm happy to provide some guidance on how to set this up - I've set it up on some other projects. Someone with admin on this repository will need to click the appropriate buttons to add the application.