dotnet / source-build

A repository to track efforts to produce a source tarball of the .NET Core SDK and all its components
MIT License
266 stars 132 forks source link

License scan is failing for sdk repo #4346

Closed Winniexu01 closed 5 months ago

Winniexu01 commented 6 months ago

main build: https://dev.azure.com/dnceng/internal/_build/results?buildId=2435523&view=logs&j=6743a87c-2e18-5ff9-0f6c-56bd82018320&t=6b957730-76c5-5b5b-c7fc-7fc79d5ee5c5

{
  "files": [
    {
      "path": "src/SourceBuild/content/test/Microsoft.DotNet.SourceBuild.SmokeTests/LicenseScanTests.cs",
      "detected_license_expression": "mit AND unknown-license-reference AND (apache-1.1 AND apache-2.0 AND llvm-exception AND apsl-2.0) AND (boost-1.0 AND bsd-new AND bsd-original-uc AND bsd-simplified AND cc0-1.0 AND cc-by-3.0 AND cc-by-4.0 AND cc-by-sa-3.0 AND cc-by-sa-4.0 AND epl-1.0 AND gpl-1.0 AND gpl-2.0 AND gpl-2.0-plus AND isc AND lgpl-2.0 AND lgpl-2.1 AND lgpl-2.1-plus AND mit AND ms-pl AND ms-rl AND ngpl AND ofl-1.1 AND public-domain AND python AND rpl-1.5 AND sax-pd AND unicode AND w3c AND x11-xconsortium AND zlib) AND (mit OR apache-2.0)"
    },
    {
      "path": "src/SourceBuild/content/test/Microsoft.DotNet.SourceBuild.SmokeTests/assets/LicenseExclusions.txt",
      "detected_license_expression": "cecill-c AND (cecill-c AND proprietary-license) AND proprietary-license AND llvm-exception"
    },
    {
      "path": "src/VirtualMonoRepo/THIRD-PARTY-NOTICES.template.txt",
      "detected_license_expression": "unknown-license-reference"
    }
  ]
}

More detail: scancode-results.json

dotnet-issue-labeler[bot] commented 6 months ago

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

MichaelSimons commented 6 months ago

Oh how ironic that the test is failing on itself 🤣

This is caused by the current work going onto consolidate the sdk and installer repos. The installer repo content currently was copied to the sdk recently which is why this just appeared. Today the source-build content is not scanned which is why this wasn't flagged before. This appears to be a gap.

mthalman commented 6 months ago

Oh how ironic that the test is failing on itself 🤣

Alt Text

MichaelSimons commented 5 months ago

[Triage] This will be resolved when the sdk->installer merge is complete.

MichaelSimons commented 5 months ago

This was resolved with the sdk-installer merge.