Updating the license from MPL 2.0 to Business Source License 1.1

.copywrite.hcl

@@ -0,0 +1,17 @@
+schema_version = 1
+
+project {
+  license          = "BUSL-1.1"
+  copyright_holder = "Mondoo, Inc."
+  copyright_year   = 2023
+
+  # (OPTIONAL) A list of globs that should not have copyright/license headers.
+  # Supports doublestar glob patterns for more flexibility in defining which
+  # files or folders should be ignored
+  header_ignore = [
+    "**/*.tf",
+    "**/testdata/**",
+    "**/*.pb.go",
+    "**/*_string.go",
+  ]
+}

.github/terraform/aws/psp-unprivileged.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:

.github/workflows/cla.yaml

@@ -1,4 +1,4 @@
-name: "CLA Assistant"
+name: "CLA Assistant & License Check"
 on:
   issue_comment:
     types: [created]
@@ -24,3 +24,15 @@ jobs:
           remote-organization-name: mondoohq
           branch: 'main'
           allowlist: mondoo-tools,github-actions[bot],dependabot[bot]
+
+  license-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Copywrite
+        uses: hashicorp/[email protected]
+
+      - name: Check Header Compliance
+        run: copywrite headers --plan

.golangci.yml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 linters:
   enable:
     - gofumpt

Dockerfile

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
 FROM gcr.io/distroless/static:nonroot

Makefile

@@ -420,3 +420,12 @@ prep/ci/protoc:
 	mkdir tools
 	unzip protoc-${PROTO_VERSION}-linux-x86_64.zip -d ./tools
 	rm protoc-${PROTO_VERSION}-linux-x86_64.zip
+
+# Copywrite Check Tool: https://github.com/hashicorp/copywrite
+license: license/headers/check
+
+license/headers/check:
+	copywrite headers --plan
+
+license/headers/apply:
+	copywrite headers

bundle.Dockerfile

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 FROM scratch
 
 # Core bundle labels.

charts/mondoo-operator/Chart.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: v2
 name: mondoo-operator
 description: A Helm chart for installing mondoo-operator on Kubernetes

charts/mondoo-operator/templates/deployment.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: v1
 kind: ServiceAccount
 metadata:

charts/mondoo-operator/templates/k8s-resources-scanning-rbac.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

charts/mondoo-operator/templates/leader-election-rbac.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:

charts/mondoo-operator/templates/manager-config.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: v1
 kind: ConfigMap
 metadata:

charts/mondoo-operator/templates/manager-rbac.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

charts/mondoo-operator/templates/metrics-reader-rbac.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

charts/mondoo-operator/templates/metrics-service.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: v1
 kind: Service
 metadata:

charts/mondoo-operator/templates/mondooauditconfig-crd.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

charts/mondoo-operator/templates/mondoooperatorconfig-crd.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

charts/mondoo-operator/templates/nodes-rbac.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:

charts/mondoo-operator/templates/proxy-rbac.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

charts/mondoo-operator/templates/workload-rbac.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

charts/mondoo-operator/values.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 controllerManager:
   manager:
     args:

cmd/mondoo-operator/garbage_collect/cmd.go

@@ -1,3 +1,6 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
 package garbage_collect
 
 import (

cmd/mondoo-operator/k8s_scan/cmd.go

@@ -1,3 +1,6 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
 package k8s_scan
 
 import (

cmd/mondoo-operator/main.go

@@ -1,3 +1,6 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
 package main
 
 import (

cmd/mondoo-operator/operator/cmd.go

@@ -1,3 +1,6 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
 package operator
 
 import (

cmd/mondoo-operator/version/cmd.go

@@ -1,3 +1,6 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
 package version
 
 import (

config/certmanager/certificate.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # The following manifests contain a self-signed issuer CR and a certificate CR.
 # More document can be found at https://docs.cert-manager.io
 # WARNING: Targets CertManager v1.0. Check https://cert-manager.io/docs/installation/upgrading/ for breaking changes.

config/certmanager/kustomization.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 resources:
 - certificate.yaml
 

config/certmanager/kustomizeconfig.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This configuration is for teaching kustomize how to update name ref and var substitution 
 nameReference:
 - kind: Issuer

config/crd/bases/k8s.mondoo.com_mondooauditconfigs.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 ---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition

config/crd/bases/k8s.mondoo.com_mondoooperatorconfigs.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 ---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition

config/crd/kustomization.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This kustomization.yaml is not intended to be run by itself,
 # since it depends on service name and namespace that are out of this kustomize package.
 # It should be run by config/default

config/crd/kustomizeconfig.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This file is for teaching kustomize how to substitute name and namespace reference in CRD
 nameReference:
 - kind: Service

config/crd/patches/cainjection_in_mondooauditconfigs.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # The following patch adds a directive for certmanager to inject CA into the CRD
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition

config/crd/patches/cainjection_in_mondoooperatorconfigs.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # The following patch adds a directive for certmanager to inject CA into the CRD
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition

config/crd/patches/webhook_in_mondooauditconfigs.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # The following patch enables a conversion webhook for the CRD
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition

config/crd/patches/webhook_in_mondoooperatorconfigs.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # The following patch enables a conversion webhook for the CRD
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition

config/default/kustomization.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # Adds namespace to all resources.
 namespace: mondoo-operator
 

config/default/manager_auth_proxy_patch.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This patch inject a sidecar container which is a HTTP proxy for the
 # controller manager, it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
 apiVersion: apps/v1

config/default/manager_config_patch.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: apps/v1
 kind: Deployment
 metadata:

config/default/manager_public_metrics_patch.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This patch exposes the metrics port for direct scraping by Prometheus, and it
 # binds the metrics port to :8080 (instead of 127.0.0.1:8080).
 apiVersion: apps/v1

config/default/manager_webhook_patch.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: apps/v1
 kind: Deployment
 metadata:

config/default/webhookcainjection_patch.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This patch add annotation to admission webhook config and
 # the variables $(CERTIFICATE_NAMESPACE) and $(CERTIFICATE_NAME) will be substituted by kustomize.
 apiVersion: admissionregistration.k8s.io/v1

config/manager/controller_manager_config.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: controller-runtime.sigs.k8s.io/v1alpha1
 kind: ControllerManagerConfig
 health:

config/manager/kustomization.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 resources:
 - manager.yaml
 - metrics-service.yaml

config/manager/manager.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: v1
 kind: Namespace
 metadata:

config/manager/metrics-service.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # This service is used for allowing direct http scraping by Prometheus
 apiVersion: v1
 kind: Service

config/manifests/bases/mondoo-operator.clusterserviceversion.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 apiVersion: operators.coreos.com/v1alpha1
 kind: ClusterServiceVersion
 metadata:

config/manifests/kustomization.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 # These resources constitute the fully configured set of manifests
 # used to generate the 'manifests/' directory in a bundle.
 resources:

config/manifests/patches/description.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 - op: add
   path: "/spec/description"
   value: |

config/prometheus/kustomization.yaml

@@ -1,2 +1,5 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 resources:
 - monitor.yaml

config/prometheus/monitor.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 
 # Prometheus Monitor Service (Metrics)
 apiVersion: monitoring.coreos.com/v1