gocsaf / csaf

Tools to download or provide CSAF (Common Security Advisory Framework) documents.
https://csaf.io
40 stars 23 forks source link

Licensing of generated files #534

Closed JanHoefelmeyer closed 5 months ago

JanHoefelmeyer commented 7 months ago

Looking at e.g. https://github.com/csaf-poc/csaf_distribution/blob/main/csaf/generate_cvss_enums.go, this will generate another file using the MIT License. Should generated files also use the Apache2.0 License and should this be changed as a part of https://github.com/csaf-poc/csaf_distribution/issues/532, or should this be left as-is?

bernhardreiter commented 7 months ago

There are two generates files in the code base:

but the input file comes with a different license. The one function copied over into the output comes from Intevation, but the source file is not and has a different license.

It seems a good solution to not create a full header.

bernhardreiter commented 6 months ago

Added label service+dev as this is part of the licensing change.

s-l-teichmann commented 5 months ago

@JanHoefelmeyer I explained the expected go generate behavior to @bernhardreiter I will adjust the generator to stamp the right license in generated files.