Updating the license from MPL 2.0 to Business Source License 1.1

mondoohq · Sep 20, 2023 · 0278756 · 0278756
1 parent ce62440
commit 0278756
Show file tree

Hide file tree

Showing 37 changed files with 200 additions and 399 deletions.
diff --git a/.copywrite.hcl b/.copywrite.hcl
@@ -0,0 +1,17 @@
+schema_version = 1
+
+project {
+  license          = "BUSL-1.1"
+  copyright_holder = "Mondoo, Inc."
+  copyright_year   = 2023
+
+  # (OPTIONAL) A list of globs that should not have copyright/license headers.
+  # Supports doublestar glob patterns for more flexibility in defining which
+  # files or folders should be ignored
+  header_ignore = [
+    "**/*.tf",
+    "**/testdata/**",
+    "**/*.pb.go",
+    "**/*_string.go",
+  ]
+}
diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml
@@ -1,9 +1,9 @@
-name: "CLA Assistant"
+name: "CLA Assistant & License Check"
 on:
   issue_comment:
     types: [created]
   pull_request_target:
-    types: [opened,closed,synchronize]
+    types: [opened, closed, synchronize]
 
 jobs:
   CLAssistant:
@@ -14,13 +14,25 @@ jobs:
         uses: contributor-assistant/[email protected]
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_ACCESS_TOKEN }}
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ACCESS_TOKEN }}
         with:
-          path-to-signatures: 'signatures/version1/cla.json'
-          path-to-document: 'https://github.com/mondoohq/.github/blob/master/CLA.md'
-          custom-pr-sign-comment: 'I have read the Mondoo CLA Document and I hereby sign the CLA'
-          custom-notsigned-prcomment: 'Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text.'
+          path-to-signatures: "signatures/version1/cla.json"
+          path-to-document: "https://github.com/mondoohq/.github/blob/master/CLA.md"
+          custom-pr-sign-comment: "I have read the Mondoo CLA Document and I hereby sign the CLA"
+          custom-notsigned-prcomment: "Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text."
           remote-repository-name: cla
           remote-organization-name: mondoohq
-          branch: 'main'
+          branch: "main"
           allowlist: mondoo-tools,github-actions[bot],dependabot[bot]
+
+  license-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Copywrite
+        uses: hashicorp/[email protected]
+
+      - name: Check Header Compliance
+        run: copywrite headers --plan
diff --git a/LICENSE b/LICENSE
diff --git a/Makefile b/Makefile
@@ -0,0 +1,8 @@
+# Copywrite Check Tool: https://github.com/hashicorp/copywrite
+license: license/headers/check
+
+license/headers/check:
+	copywrite headers --plan
+
+license/headers/apply:
+	copywrite headers
diff --git a/README.md b/README.md
@@ -58,4 +58,4 @@ Additional certified security and compliance policies can be found in the Policy
 
 ## License
 
-[Mozilla Public License v2.0](https://github.com/mondoohq/mondoo-operator/blob/main/LICENSE)
+[Business Source License 1.1](LICENSE)
diff --git a/community/chef-infra-client.mql.yaml b/community/chef-infra-client.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: chef-infra-client
     name: Chef Infra Client Policy
     version: 1.0.1
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: linux,unix

diff --git a/community/chef-infra-server.mql.yaml b/community/chef-infra-server.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: chef-infra-server
     name: Chef Infra Server Policy
     version: 1.1.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: linux

diff --git a/community/email-security-spf.mql.yaml b/community/email-security-spf.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: email-security-policy-spf
     name: Email Security Policy (SPF)
     version: 0.0.2
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security,email
       mondoo.com/platform: dns

diff --git a/community/mondoo-linux-operational-policy.mql.yaml b/community/mondoo-linux-operational-policy.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: linux-operational-policy
     name: Linux Server Operational Policy
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: best-practices
       mondoo.com/platform: linux,host

diff --git a/community/mondoo-linux-snmp-policy.mql.yaml b/community/mondoo-linux-snmp-policy.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: linux-snmp-policy
     name: Linux Server Operational Policy
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: best-practices
       mondoo.com/platform: linux,host

diff --git a/community/mondoo-phoenix-plcnext-security.mql.yaml b/community/mondoo-phoenix-plcnext-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: phoenix-plcnext
     name: Phoenix PLCnext Security Policy
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       benchmark: Mondoo Phoenix PLCnext
       date: "2023-02-11"

diff --git a/community/terraform-deprecations.mql.yaml b/community/terraform-deprecations.mql.yaml
@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: terraform-deprecations
     name: Terraform HCL Deprecations Policy

diff --git a/core/mondoo-aws-security.mql.yaml b/core/mondoo-aws-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-aws-security
     name: AWS Security
     version: 2.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: aws,cloud

diff --git a/core/mondoo-azure-security.mql.yaml b/core/mondoo-azure-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-azure-security
     name: Microsoft Azure Security
     version: 1.2.1
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: azure,cloud

diff --git a/core/mondoo-dns-security.mql.yaml b/core/mondoo-dns-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-dns-security
     name: DNS Security
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: dns

diff --git a/core/mondoo-gcp-security.mql.yaml b/core/mondoo-gcp-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-gcp-security
     name: Google Cloud (GCP) Security
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: gcp,gcp-project,cloud

diff --git a/core/mondoo-github-best-practices.mql.yaml b/core/mondoo-github-best-practices.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-github-repository-best-practices
     name: GitHub Repository Best Practices
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-github-security.mql.yaml b/core/mondoo-github-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-github-organization-security
     name: GitHub Organization Security
     version: 1.4.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: github,saas
@@ -23,7 +26,7 @@ policies:
   - uid: mondoo-github-repository-security
     name: GitHub Repository Security
     version: 1.4.0
-    license: MPL-2.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-gitlab-security.mql.yaml b/core/mondoo-gitlab-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-gitlab-security
     name: GitLab Security
     version: 1.3.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: gitlab,saas

diff --git a/core/mondoo-kubernetes-best-practices.mql.yaml b/core/mondoo-kubernetes-best-practices.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-kubernetes-best-practices
     name: Kubernetes Best Practices
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: best-practices
       mondoo.com/platform: kubernetes,k8s

diff --git a/core/mondoo-kubernetes-security.mql.yaml b/core/mondoo-kubernetes-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-kubernetes-security
     name: Kubernetes Cluster and Workload Security
     version: 1.0.2
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: linux,kubernetes,k8s

diff --git a/core/mondoo-linux-security.mql.yaml b/core/mondoo-linux-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-linux-security
     name: Linux Security
     version: 2.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: linux,host

diff --git a/core/mondoo-linux-workstation-security.mql.yaml b/core/mondoo-linux-workstation-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-linux-workstation-security
     name: Linux Workstation Security
     version: 0.3.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: linux,host

diff --git a/core/mondoo-macos-security.mql.yaml b/core/mondoo-macos-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-macos-security
     name: macOS Security
     version: 1.0.5
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: macos,host

diff --git a/core/mondoo-macos-vulnerability.mql.yaml b/core/mondoo-macos-vulnerability.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-macos-vulnerability
     name: macOS Vulnerability Policy
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: macos,host

diff --git a/core/mondoo-microsoft-vulnerability.mql.yaml b/core/mondoo-microsoft-vulnerability.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-microsoft-vulnerability
     name: Microsoft Vulnerability Policy
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: windows,host

diff --git a/core/mondoo-ms365-security.mql.yaml b/core/mondoo-ms365-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-ms365-security
     name: Microsoft 365 Security
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: microsoft365,cloud

diff --git a/core/mondoo-okta-security.mql.yaml b/core/mondoo-okta-security.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-okta-security
     name: Okta Organization Security
     version: 2.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: okta-org,saas

diff --git a/core/mondoo-openssl-vulnerability.mql.yaml b/core/mondoo-openssl-vulnerability.mql.yaml
@@ -1,8 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-openssl-vulnerability
     name: OpenSSL Vulnerability Policy
     version: 1.0.0
-    license: MPL-2.0
+    license: BUSL-1.1
     tags:
       mondoo.com/category: security
       mondoo.com/platform: linux,unix,host

diff --git a/core/mondoo-slack-security.mql.yaml b/core/mondoo-slack-security.mql.yaml
@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 policies:
   - uid: mondoo-slack-security
     name: Slack Team Security
Original file line number	Diff line number	Diff line change
Expand Up		@@ -58,4 +58,4 @@ Additional certified security and compliance policies can be found in the Policy

		## License

		[Mozilla Public License v2.0](https://github.com/mondoohq/mondoo-operator/blob/main/LICENSE)
		[Business Source License 1.1](LICENSE)