anchore / grant

Search an SBOM for licenses and the packages they belong to
Apache License 2.0
59 stars 3 forks source link

Feature: Classification of Licenses by Grouping #98

Open spiffcs opened 2 months ago

spiffcs commented 2 months ago

Summary

For the next version of Grant we'd like to see a grant-db that normalizes and merges the following datasets:

Combining these data sets will allow Grant to qualify licenses in the following groupings:

These groupings will allow users to enable better policy rules that ignore or warn on groups of licenses rather than having to configure each individually.

Out of scope for this issue but under consideration for future work is providing the ability for a user to add/annotate additional licenses to the dataset that are not found in the sources listed above.