Brennan, Cool, thanks, I would like a login to the fossology server. I also don't exactly understand what needs to be done with the fossology reports... is there a wiki page or something that documents the process we need to follow?
cheers adam On Sat, Mar 7, 2020 at 6:45 PM Brennan Ashton <bash...@brennanashton.com> wrote: > Adam if you look back I have a hosted instance of it running for the > project, no sense in duplicating the work. I'm happy to provide you an > account. The nice thing about using this is that the reports can be shared > publicly and we can use the proper flow of working through the identified > license and copyrights and then marking them as resolved. > > --Brennan > > On Sat, Mar 7, 2020, 4:13 PM Adam Feuer <a...@starcat.io> wrote: > > > Justin, > > > > Ok, I installed Fossology on my personal workstation, and I verified the > > instance works and can scan the github.com/apache/incubator-nuttx repo. > I > > am not sure how to use it or what the process of "clearing" software > > licenses is. > > > > Does Apache have a recommended way to use the Fossology tool as part of a > > project? Or how a podling should use it? If so would you be willing to > > point us at some documentation? Or if not, who I could talk with to get > an > > idea about how to use it? My apologies if this has already been covered, > > I'm relatively new here. > > > > cheers > > adam > > > > On Sat, Mar 7, 2020 at 4:02 PM Adam Feuer <a...@starcat.io> wrote: > > > > > Justin, > > > > > > I installed a Fossology instance right now using Docker (the > > > docker-compose version) and am running it against nuttx source code. I > > have > > > never used fossology, but I'll post the results to the list if I can > get > > an > > > intelligible report out of it. :) > > > > > > cheers > > > adam > > > > > > On Sat, Mar 7, 2020 at 5:27 AM Justin Mclean <jus...@classsoftware.com > > > > > wrote: > > > > > >> Hi, > > >> > > >> > For now, I think I think that you could just find all files that > > >> contain my Copyright (grep -rl "Gregory Nutt" *), and then make sure > the > > >> word Copyright appears only once in the file (count=`grep Copyright > > >> $file1`; if [ $count -eq 1 ]; then …) > > >> > > >> I would take care with this, copyright may not always be explicitly > > >> claimed. Please see previous threads on this. I've recommend you use > > >> something like fossology to track this several times, including before > > you > > >> entered incubation. > > >> > > >> > There are many files that have Pinecone, Xiamoi, and Sony Copyrights > > as > > >> well. I think we should get an SGA from Xiaomi and Sony ASAP. > > >> > > >> A software grant is not required but it may make the licensing > situation > > >> a little easier, but there’s about 150+(?) different copyright holders > > so > > >> that still need to be dealt with. > > >> > > >> Thanks, > > >> Justin > > > > > > > > > > > > -- > > > Adam Feuer <a...@starcat.io> > > > > > > > > > -- > > Adam Feuer <a...@starcat.io> > > > -- Adam Feuer <a...@starcat.io>
