Repository navigation
Verify PRs for Correct SPDX Header in Main Repo #957
Description
Implement a check which verifies that PRs have the valid SPDX headers:
# SPDX-FileCopyrightText: the secureCodeBox authors
#
# SPDX-License-Identifier: Apache-2.0
Metadata
Metadata
Assignees
Type
Projects
- Status
Activity
[-]Verify PRs for Correct SPDX Header[/-][+]Verify PRs for Correct SPDX Header in Main Repo[/+]Weltraumschaf commentedon Sep 12, 2023
Also for defectdojo-client.
Weltraumschaf commentedon Sep 12, 2023
Maybe we can reuse the reuse tool for that. Or this action https://github.com/enarx/spdx
Zero3141 commentedon Sep 15, 2023
See my comment in #1961 (comment). We should fix all license problems before integrating it into the CI (especially when setting it to
Required)Zero3141 commentedon Sep 15, 2023
Some files like GitHub Actions files don't support license headers or files. We could bulk-license whole directories by adding its path to the
.reuse/dep5file in the root directory. See here and here for more information.Further, we should decide how to handle the images used in our blog (e.g.
documentation/static/img/blog/2021-06-07-why.jpg), scanner icons (e.g.documentation/static/img/integrationIcons/ffuf.svg), ...secureCodeBox#957 Remove unnecessary executable bit
55 remaining items
#957 Add OWASP license headers to their logos
#957 Add SPDX tags to files wich are under not licanse and require ex…
#957 Add licens files for Gradle wrapper files
#957 Add No-License SPDX tag to code copied from Docker Inc.'s website
#957 Add missing no license tags for icons
#957 Reformat file for better editing
#957 Not used in the code
#957 Not used in the code
#957 Not used in the code
#957 Remove white spaces from file names to prevent word splitting on…
#957 Add missing license info to the last scanner icons
#957 reuse tool does not accept CC0 so used no-license
#957 Since Secure contributed this to our project we assume our licen…