Skip to content

feat: declare package license via rules_license - #432

Closed
umaucher wants to merge 1 commit into
eclipse-score:mainfrom
umaucher:um_rules_license
Closed

feat: declare package license via rules_license#432
umaucher wants to merge 1 commit into
eclipse-score:mainfrom
umaucher:um_rules_license

Conversation

@umaucher

@umaucher umaucher commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

Declares this module's license (SPDX Apache-2.0) using rules_license, so downstream tooling can determine it automatically instead of relying on per-consumer manual declarations (see eclipse-score/persistency#um_sbom_tool2 discussion on score_sbom license handling).

This is a suggestion/prototype to validate the approach and drive further score_sbom development — score_sbom does not yet consume rules_license providers, so this alone does not change any generated SBOM output.

Companion change: eclipse-score/baselibs (branch um_rules_license).

@umaucher
feat: declare package license via rules_license
c87dcda 
Add a machine-readable license declaration (SPDX Apache-2.0) using
rules_license, so downstream tooling (e.g. rules_license's own
gather_licenses_info aspect, or score_sbom once it consumes
rules_license providers) can determine this module's license without
guessing or manual per-consumer declarations.

Prototype/discussion for driving score_sbom license-handling
development further; not yet consumed by score_sbom.
@umaucher
umaucher deployed to workflow-approval September 22, 2026 15:29 — with GitHub Actions Active
@umaucher
umaucher deployed to workflow-approval September 22, 2026 15:29 — with GitHub Actions Active
@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run --lockfile_mode=error //:license-check

Status: ⚠️ Needs Review

Click to expand output 
[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: 636eae6b-8c8f-4f35-aa91-0438aa0bd67d
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 2 packages loaded
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)

Analyzing: target //:license-check (63 packages loaded, 13 targets configured)

Analyzing: target //:license-check (103 packages loaded, 123 targets configured)

Analyzing: target //:license-check (149 packages loaded, 3136 targets configured)

Analyzing: target //:license-check (149 packages loaded, 3136 targets configured)

Analyzing: target //:license-check (149 packages loaded, 3136 targets configured)

Analyzing: target //:license-check (159 packages loaded, 6232 targets configured)

Analyzing: target //:license-check (166 packages loaded, 8899 targets configured)

Analyzing: target //:license-check (171 packages loaded, 9393 targets configured)

Analyzing: target //:license-check (172 packages loaded, 9401 targets configured)

Analyzing: target //:license-check (172 packages loaded, 9401 targets configured)

Analyzing: target //:license-check (175 packages loaded, 11289 targets configured)

Analyzing: target //:license-check (175 packages loaded, 11289 targets configured)

Analyzing: target //:license-check (176 packages loaded, 11413 targets configured)

INFO: Analyzed target //:license-check (177 packages loaded, 11539 targets configured).
[6 / 16] Writing repo mapping manifest for //:license.check.license_check; 0s local
[13 / 17] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 0s disk-cache, processwrapper-sandbox ... (2 actions running)
INFO: From Generating Dash formatted dependency file ...:
INFO: Successfully converted 66 packages from Cargo.lock to bazel-out/k8-fastbuild/bin/formatted.txt
[15 / 17] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar; 0s disk-cache, processwrapper-sandbox
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 35.287s, Critical Path: 2.55s
INFO: 17 processes: 12 internal, 4 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 17 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

The created documentation from the pull request is available at: docu-html

@umaucher
umaucher marked this pull request as ready for review September 22, 2026 15:55
@umaucher

umaucher commented Sep 23, 2026

Copy link
Copy Markdown
Contributor Author

obsolete might be discussed again if https://github.com/bazel-contrib/supply-chain gets in shape

@umaucher umaucher closed this Sep 23, 2026
@umaucher
umaucher deleted the um_rules_license branch September 23, 2026 11:48
@PandaeDo PandaeDo mentioned this pull request Oct 6, 2026
Merged

This branch was successfully deployed

1 active deployment
workflow-approval — c87dcda1 Deployed Sep 22, 2026 by umaucher via qnx-build (per-arm64-qnx) / approval #395
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vinodreddy-g vinodreddy-g Awaiting requested review from vinodreddy-g vinodreddy-g is a code owner
@PandaeDo PandaeDo Awaiting requested review from PandaeDo PandaeDo is a code owner
@antonkri antonkri Awaiting requested review from antonkri antonkri is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@umaucher