-
Notifications
You must be signed in to change notification settings - Fork 3k
Add workaround for files with permissive binary licenses #13847
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
0xc0170
reviewed
Nov 3, 2020
d49d6ed
to
a07e39f
Compare
hugueskamba
reviewed
Nov 3, 2020
a07e39f
to
2629deb
Compare
Add function "has_binary_license" to check if a file has a non-permissive license contains one. PBL is not recognized by scancode, causing it to be flagged as a non-permissive license. CI doesn't allow any non-permissive licenses, although, files flageed as SPDX are allowed. Workaround causes all files with a valid PBL to be flagged as missing an SPDX. Add condition in "has_spdx_text_in_scancode_output" to ignore any spdx identifier with "unknown" in the name. Scancode erroneously matches PBL to matched_rule.identifer "spdx-license-identifier: unknown-spdx". This prevents the workaround from working.
2629deb
to
d085e9f
Compare
0xc0170
previously approved these changes
Nov 4, 2020
@hugueskamba I've pushed new changes that should address some of your points. |
hugueskamba
previously requested changes
Nov 5, 2020
Pull request has been modified.
383e5bb
to
3c97713
Compare
hugueskamba
reviewed
Nov 6, 2020
74ab164
to
224d87a
Compare
@hugueskamba @0xc0170 please see the latest changes for your review. |
0xc0170
previously approved these changes
Nov 6, 2020
hugueskamba
reviewed
Nov 6, 2020
224d87a
to
e2de080
Compare
hugueskamba
reviewed
Nov 6, 2020
Add function "has_binary_license" to check if a file has a non-permissive license contains one. PBL is not recognized by scancode, causing it to be flagged as a non-permissive license. CI doesn't allow any non-permissive licenses, although, files flageed as SPDX are allowed. Workaround causes all files with a valid PBL to be flagged as missing an SPDX. Add condition in "has_spdx_text_in_scancode_output" to ignore any spdx identifier with "unknown" in the name. Scancode erroneously matches PBL to matched_rule.identifer "spdx-license-identifier: unknown-spdx". This prevents the workaround from working.
e2de080
to
e93a3e2
Compare
hugueskamba
approved these changes
Nov 6, 2020
0xc0170
approved these changes
Nov 9, 2020
CI started |
Jenkins CI Test : ✔️ SUCCESSBuild Number: 1 | 🔒 Jenkins CI Job | 🌐 Logs & ArtifactsCLICK for Detailed Summary
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary of changes
Fixes #13840
Add function for checking that files with Permissive Binary Licenses are not erroneously flagged as missing permissive licenses. Scancode does not currently have our license in its database as PBL is not a recognized SPDX license. This is a temporary solution until we are able to get the license into a scancode toolkit release.
Impact of changes
Affects CI, files with PBL licenses
Migration actions required
None
Documentation
None
Pull request type
Test results
Reviewers
@0xc0170 @hugueskamba @ARMmbed/mbed-os-maintainers