Skip to content
Snippets Groups Projects
Commit 0f606384 authored by Ryan Gonzalez's avatar Ryan Gonzalez
Browse files

automated-license-compliance: Switch GitLab URLs to branches vs commits


Using exact commits allows for better reliability...but it makes
ensuring the versions are in sync significantly harder. Instead, we can
just switch to the branches and avoid pointing to specific lines.

Signed-off-by: default avatarRyan Gonzalez <ryan.gonzalez@collabora.com>
parent 007e4984
No related branches found
No related tags found
1 merge request!428automated-license-compliance: Update with changes for Rust packages
......@@ -134,25 +134,25 @@ Other packages only provide copyright information which currently is not include
{{% /notice %}}
1. when a package is imported from Debian to Apertis the
[`scan-license` job in the packaging pipeline](https://gitlab.apertis.org/infrastructure/ci-package-builder/-/blob/c2c59e28/ci-package-builder.yml#L313)
[`scan-license` job in the packaging pipeline](https://gitlab.apertis.org/infrastructure/ci-package-builder/-/blob/master/ci-package-builder.yml)
will call
[`ci-license-scan`](https://gitlab.apertis.org/infrastructure/apertis-docker-images/-/blob/6bc2a375/package-source-builder/overlay/usr/bin/ci-license-scan)
[`ci-license-scan`](https://gitlab.apertis.org/infrastructure/apertis-docker-images/-/blob/apertis/v2023dev2/package-source-builder/overlay/usr/bin/ci-license-scan)
to submit the sources to the scanner, be it `scan-copyright`, FOSSology or any other tool
1. metadata in
[`debian/apertis/copyright.yml`](https://gitlab.apertis.org/pkg/gnutls28/-/blob/dae6f34d/debian/apertis/copyright.yml)
[`debian/apertis/copyright.yml`](https://gitlab.apertis.org/pkg/gnutls28/-/blob/apertis/v2023dev2/debian/apertis/copyright.yml)
can be used to override things where the scanner gives the wrong results,
which should no longer be needed once the switch to FOSSology is completed and
the correct licensing information is stored in its database
1. the output is committed in the
[`debian/apertis/copyright` file in the sources](https://gitlab.apertis.org/pkg/gnutls28/-/blob/dae6f34d/debian/apertis/copyright)
[`debian/apertis/copyright` file in the sources](https://gitlab.apertis.org/pkg/gnutls28/-/blob/apertis/v2023dev2/debian/apertis/copyright)
1. if some files have problematic licenses but they do not really affect us for
any reason, the reason is documented in
[`debian/apertis/copyright.whitelist`](https://gitlab.apertis.org/pkg/gnutls28/-/blob/dae6f34d/debian/apertis/copyright.whitelist)
[`debian/apertis/copyright.whitelist`](https://gitlab.apertis.org/pkg/gnutls28/-/blob/apertis/v2023dev2/debian/apertis/copyright.whitelist)
1. for packages meant to be installed on production devices, the packaging
pipeline will fail if problematic licenses are detected and the affected
files are not whitelisted
1. when the sources are submitted to OBS, during the build the
[`dh_dwarf2sources` subcommand for Debhelper](https://gitlab.apertis.org/pkg/debhelper/-/blob/8abfd8a5/dh_dwarf2sources)
[`dh_dwarf2sources` subcommand for Debhelper](https://gitlab.apertis.org/pkg/debhelper/-/blob/apertis/v2023dev2/dh_dwarf2sources)
calls the
[`dwarf2sources` tool](https://gitlab.apertis.org/pkg/dwarf2sources/)
to generate a mapping from binaries to the source files used to build them
......@@ -166,8 +166,8 @@ Other packages only provide copyright information which currently is not include
`/usr/share/doc/$packagename/$packagename_bin2sources_$packagearch.json` and
`/usr/share/doc/$packagename/copyright_report.gz` files get unpacked during
image generation
1. the [`generate_bom.py` script](https://gitlab.apertis.org/infrastructure/apertis-image-recipes/-/blob/283bcd3f/scripts/generate_bom.py)
is [invoked at the end of each image recipe](https://gitlab.apertis.org/infrastructure/apertis-image-recipes/-/blob/283bcd3f/image-uboot.yaml#L150),
1. the [`generate_bom.py` script](https://gitlab.apertis.org/infrastructure/apertis-image-recipes/-/blob/apertis/v2023dev2/scripts/generate_bom.py)
is [invoked at the end of each image recipe](https://gitlab.apertis.org/infrastructure/apertis-image-recipes/-/blob/apertis/v2023dev2/image-uboot.yaml),
loading all the
`/usr/share/doc/$packagename/$packagename_bin2sources_$packagearch.json`
binary-to-sourcefiles mappings and
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment