GoogleContainerTools / distroless

🥑 Language focused docker images, minus the operating system.
Apache License 2.0
18.99k stars 1.16k forks source link

Missed copyrights for libgcc-s1, libgomp1, libstdc++6 packages #1395

Open pavelchavyr opened 1 year ago

pavelchavyr commented 1 year ago

Checked with gcr.io/distroless/java17-debian11.

Copyrights for all installed packages saved in /usr/share/doc directory. But the copyrights for the libgcc-s1, libgomp1, libstdc++6 are just symbolic links to the copyright for the gcc-10-base, which is not installed and therefore missing. Screenshot from 2023-09-08 18-04-27

loosebazooka commented 1 year ago

Ugh, well that's a weird quirk. I guess we can pull that package and extract the copyright.

pavelchavyr commented 1 year ago

Yes, I think it is good idea. But I'm not so familiar with this code. Maybe someone can do that?

polarathene commented 2 months ago

Is this a legal requirement to distribute the copyrights within the image content? Or can that be resolved via other means?