Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

3rd Party License Obligations #15

Closed
wants to merge 43 commits into from
Closed

3rd Party License Obligations #15

wants to merge 43 commits into from

Conversation

grevend-bosch
Copy link
Contributor

Create the 3RD-PARTY-LICENSES directory, generate the sbom.xml and add dependency obligations for:

  • picocli (4.6.1)
  • jackson-core (2.12.3)
  • scribejava-apis (8.3.1)
  • Carbyne Stack APIs dependencies
    • amphora-java-client (0.1-SNAPSHOT-1261403362-2-41864d8)
    • castor-common (0.1-SNAPSHOT-1261403451-2-78f5f5b)
    • castor-java-client (0.1-SNAPSHOT-1261403451-2-78f5f5b)
    • castor-upload-java-client (0.1-SNAPSHOT-1261403451-2-78f5f5b)
    • ephemeral-java-client (0.1-SNAPSHOT-1261324039-3-d2504ed)
  • and all other nested dependencies

In addition, a "3rd Party Licenses" section should be created in the readme.

@grevend-bosch
Generate sbom.xml
0044e95 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add commons-codec_commons-codec license and notice file
a8ddd2b 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add commons-io_commons-io license and notice file
661d6c5 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.apache.commons_commons-lang3 license and notice file
ecd6851 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add commons-logging_commons-logging license and notice file
44a91b2 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.apache.httpcomponents_httpclient license and notice file
f73c5e3 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.apache.httpcomponents_httpcore license and notice file
e8c8b55 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.checkerframework_checker-qual license file
81d5399 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.google.errorprone_error_prone_annotations license and copying…
a202d72 
… file

Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.google.code.findbugs_jsr305 license file
63f1389 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.google.guava_failureaccess copying file
601c3b8 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.google.guava_listenablefuture copying file
602418d 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.google.guava_guava copying file
90a7b3d 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.google.j2objc_j2objc-annotations license file
f474abf 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.fasterxml.jackson.core_jackson-core license file
9bee8d2 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.fasterxml.jackson.core_jackson-databind license file
04e7f47 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.slf4j_jul-to-slf4j license file
1fc13af 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add info.picocli_picocli license file
14fa5f7 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.projectlombok_lombok license file
bce996a 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.github.scribejava_scribejava-apis license file
b002c8f 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.github.scribejava_scribejava-core license file
8fef62d 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.github.scribejava_scribejava-java8 license file
30aead3 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.slf4j_slf4j-api license file
569c370 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-aop license file
8d961ea 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-beans license file
d615c24 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-jcl license file
815c0fc 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-context license file
90dae54 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-core license file
1e19a60 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-expression license file
86807fe 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-messaging license file
7bf5e99 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework.retry_spring-retry license file
c3e0d56 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-web license file
88c2968 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework_spring-websocket license file
4be81ab 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework.security_spring-security-core license file
15c96a9 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.springframework.security_spring-security-web license file
3ba222d 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.apache.tomcat_tomcat-annotations-api license and notice file
4027ad0 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.apache.tomcat.embed_tomcat-embed-core license and notice file
257d7f6 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add org.apache.tomcat.embed_tomcat-embed-websocket license and notice…
63c6af9 
… file

Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add io.vavr_vavr license file
5c2219d 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add io.vavr_vavr-match license file
2d3fe5e 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add com.fasterxml.jackson.core_jackson-annotations license file
6c2c91c 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch
Add 3rd party licenses section in readme
5a3851e 
Signed-off-by: David Greven <[email protected]>
@grevend-bosch grevend-bosch added kind/documentation Categorizes issue or PR as related to documentation. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. labels Sep 27, 2021
@grevend-bosch grevend-bosch added this to the Initial Configuration milestone Sep 27, 2021
@grevend-bosch grevend-bosch requested a review from sbckr September 27, 2021 07:26
@grevend-bosch grevend-bosch self-assigned this Sep 27, 2021
@grevend-bosch grevend-bosch linked an issue Sep 27, 2021 that may be closed by this pull request
3rd Party License Obligations #14
Closed
@grevend-bosch grevend-bosch mentioned this pull request Sep 27, 2021
Merged
4 tasks
@grevend-bosch grevend-bosch removed a link to an issue Sep 27, 2021
3rd Party License Obligations #14
Closed
@sbckr
Copy link
Member

sbckr commented Sep 27, 2021

Changes will be merged with PR #17.
-> Closed

@sbckr sbckr closed this Sep 27, 2021
@grevend-bosch grevend-bosch deleted the initial/14-3rd-party-license-obligations branch September 27, 2021 13:22
This was referenced Oct 7, 2021
Closed
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sbckr sbckr Awaiting requested review from sbckr

Assignees

@grevend-bosch grevend-bosch

Labels
kind/documentation Categorizes issue or PR as related to documentation. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@grevend-bosch @sbckr