Adam if you look back I have a hosted instance of it running for the project, no sense in duplicating the work. I'm happy to provide you an account. The nice thing about using this is that the reports can be shared publicly and we can use the proper flow of working through the identified license and copyrights and then marking them as resolved.
--Brennan On Sat, Mar 7, 2020, 4:13 PM Adam Feuer <a...@starcat.io> wrote: > Justin, > > Ok, I installed Fossology on my personal workstation, and I verified the > instance works and can scan the github.com/apache/incubator-nuttx repo. I > am not sure how to use it or what the process of "clearing" software > licenses is. > > Does Apache have a recommended way to use the Fossology tool as part of a > project? Or how a podling should use it? If so would you be willing to > point us at some documentation? Or if not, who I could talk with to get an > idea about how to use it? My apologies if this has already been covered, > I'm relatively new here. > > cheers > adam > > On Sat, Mar 7, 2020 at 4:02 PM Adam Feuer <a...@starcat.io> wrote: > > > Justin, > > > > I installed a Fossology instance right now using Docker (the > > docker-compose version) and am running it against nuttx source code. I > have > > never used fossology, but I'll post the results to the list if I can get > an > > intelligible report out of it. :) > > > > cheers > > adam > > > > On Sat, Mar 7, 2020 at 5:27 AM Justin Mclean <jus...@classsoftware.com> > > wrote: > > > >> Hi, > >> > >> > For now, I think I think that you could just find all files that > >> contain my Copyright (grep -rl "Gregory Nutt" *), and then make sure the > >> word Copyright appears only once in the file (count=`grep Copyright > >> $file1`; if [ $count -eq 1 ]; then …) > >> > >> I would take care with this, copyright may not always be explicitly > >> claimed. Please see previous threads on this. I've recommend you use > >> something like fossology to track this several times, including before > you > >> entered incubation. > >> > >> > There are many files that have Pinecone, Xiamoi, and Sony Copyrights > as > >> well. I think we should get an SGA from Xiaomi and Sony ASAP. > >> > >> A software grant is not required but it may make the licensing situation > >> a little easier, but there’s about 150+(?) different copyright holders > so > >> that still need to be dealt with. > >> > >> Thanks, > >> Justin > > > > > > > > -- > > Adam Feuer <a...@starcat.io> > > > > > -- > Adam Feuer <a...@starcat.io> >
