-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Introduce License Finder to CI #94
Conversation
$ license_finder permitted_licenses add 'MIT' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/MIT' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'Apache 2.0' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/apache-2-0' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'ISC' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/isc-license-txt' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'BSD 0-Clause' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/0BSD' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'BSD 2-Clause' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/BSD-2-Clause' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'BSD 3-Clause' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/BSD-3-Clause' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'BlueOak-1.0.0' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/blue-oak-model-license' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'The Unlicense' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/Unlicense' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'CC-BY-4.0' \ --why 'Compatible with Apache-2.0 license. See https://creativecommons.org/licenses/by/4.0/' \ --who 'OSPO @masutaka'
d1a3f97
to
52fb94a
Compare
$ license_finder approvals add 'argparse' \ --version=2.0.1 \ --why 'Python 2.0 license is compatible with Apache-2.0. But License Finder does not support the name "Python-2.0". See pivotal/LicenseFinder#1053' \ --who 'OSPO @masutaka'
$ license_finder approvals add 'libpg-query' \ --version=13.3.2 \ --why 'Its license is MIT, but it is mis-detected as a "LICENSE IN LICENSE" license. See launchql/libpg-query-node#85' \ --who 'OSPO @masutaka'
f9d4074
to
f30bf82
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 🚀
Thanks a lot of your work!!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is pretty straightforward! 😄
:why: Public Domain is compatible with Apache-2.0. But it is not a software license. | ||
See https://github.com/liam-hq/liam/issues/111 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK
Thanks 🙏🏻
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 😄
The main branch had more licenses and I will deal with them. 🔗 https://github.com/liam-hq/liam/actions/runs/12081630218/job/33691096256 |
$ license_finder permitted_licenses add 'LGPL-3.0-or-later' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/LGPL-3.0' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'CC0 1.0 Universal' \ --why 'Compatible with Apache-2.0 license. See https://creativecommons.org/publicdomain/zero/1.0/' \ --who 'OSPO @masutaka'
$ license_finder approvals add 'spawndamnit' \ --version=3.0.1 \ --why 'Its license is MIT, but it is mis-detected as a "SEE LICENSE IN LICENSE" license. See jamiebuilds/spawndamnit#11' \ --who 'OSPO @masutaka'
$ license_finder permitted_licenses add 'Mozilla Public License 2.0' \ --why 'Compatible with Apache-2.0 license. See https://opensource.org/license/mpl-2-0' \ --who 'OSPO @masutaka'
It's removed by #110
d4f7cfe
to
1741ea3
Compare
@MH4GF Please review again. The main branch had more licenses, so I added commits 2bd8f75...1741ea3 . 9d698a9 and also created a PR jamiebuilds/spawndamnit#11 in connection with it. |
For some reason frontend-ci is down.... |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 🚀
License Finder is better to activate it as soon as possible, so I will merge this one.
Summary
This PR introduces License Finder to CI for maintaining license compliance.
frontend/config/dependency_decisions.yml
frontend/docs/packages-license.md
Related Issues and pull requests
Python-2.0
license instead ofargparse
package #115Changes
Testing
1
. Since neither running License Finder nor creating a license report was necessary, they were skippedOther Information
CI_TRIGGER_APP_ID
CI_TRIGGER_APP_PRIVATE_KEY