Non SPDX license and few files with wrong permissions

Hey, while working on https://diffend.io and scanning releases, I've noticed a few things that could be improved based on the 2.2.17 release:

You use non spdx license id, while RubyGems recommend using spdx one (https://guides.rubygems.org/specification-reference/#license=) ref: https://spdx.org/licenses/GPL-3.0-or-later.html - it should be GPL-3.0-or-later (or non later depending on what you choose)
for any reason, this file: data/vendor/assets/fonts/insights/fonts/insights-icons.svg has executable permission in it (is it executable?)
many of the font files also have executable permissions, for example, data/vendor/assets/fonts/insights/fonts/overpass-bold.ttf

Have a great day :)

redhataccess / foreman-plugin