Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: fix licensing info for generated files #542

Merged
merged 2 commits into from
Jun 21, 2024

Conversation

bernhardreiter
Copy link
Member

  • change generate_cvss_enums.go to note that the input file is relevant for the license.
  • change license and copyright of cvss20enums.go and cvss3enums.go to BSD-3-Clause and FIRST.
  • add reuse.software 3.0 compatible files for the schema cvss files.

resolves #534

 * change generate_cvss_enums.go to note that the input file is
   relevant for the license.
 * change license and copyright of cvss20enums.go and cvss3enums.go
   to BSD-3-Clause and FIRST.
 * add reuse.software 3.0 compatible files for the schema cvss files.
JanHoefelmeyer
JanHoefelmeyer previously approved these changes May 8, 2024
Copy link
Contributor

@JanHoefelmeyer JanHoefelmeyer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM & works

@tschmidtb51
Copy link
Collaborator

I might have missed that. Why is it assumed to be BSD-3clause?

@bernhardreiter
Copy link
Member Author

I might have missed that. Why is it assumed to be BSD-3clause?

The input files are licensed under BSD-3-Clause by FIRST, e.g. see
https://github.com/csaf-poc/csaf_distribution/blob/main/csaf/schema/cvss-v2.0.json#L2-L21

And see comment in the improved generate_cvss_enums.go:

// We from Intevation consider the source code parts in the following
// template file as too insignificant to be a piece of work that gains
// "copyrights" protection in the European Union. So the license(s)
// of the output files are fully determined by the input file.

@bernhardreiter
Copy link
Member Author

@s-l-teichmann ping

Copy link
Contributor

@s-l-teichmann s-l-teichmann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is not correctly used.

Running go generate ./... in the root folder results in a diff

diff --git a/csaf/cvss20enums.go b/csaf/cvss20enums.go
index 97d2e10..d7c647d 100644
--- a/csaf/cvss20enums.go
+++ b/csaf/cvss20enums.go
@@ -1,5 +1,4 @@
-// SPDX-License-Identifier: BSD-3-Clause
-// SPDX-FileCopyrightText: 2017 FIRST.ORG, INC.
+// determine license(s) from input file and replace this line
 //
 // THIS FILE IS MACHINE GENERATED. EDIT WITH CARE!
 
diff --git a/csaf/cvss3enums.go b/csaf/cvss3enums.go
index 32e01e3..1367820 100644
--- a/csaf/cvss3enums.go
+++ b/csaf/cvss3enums.go
@@ -1,5 +1,4 @@
-// SPDX-License-Identifier: BSD-3-Clause
-// SPDX-FileCopyrightText: 2017 FIRST.ORG, INC.
+// determine license(s) from input file and replace this line
 //
 // THIS FILE IS MACHINE GENERATED. EDIT WITH CARE!

There should be no diff!

Copy link
Contributor

@JanHoefelmeyer JanHoefelmeyer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No longer a diff

LGTM & works

@s-l-teichmann s-l-teichmann merged commit e2ad3d3 into main Jun 21, 2024
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Licensing of generated files
4 participants