From c9cf8ec199554b8439eb1ffa455309542bda67a9 Mon Sep 17 00:00:00 2001 From: Michelangelo Mori Date: Wed, 8 Jan 2025 15:50:11 +0100 Subject: [PATCH] Add `license-is-osi-or-fsf-approved` rule type. This rule type checks that the license detected by GitHub is approved by either OSI or FSF. It uses two data sources, one to call GitHub API to get the SPDX identifier of the license, and another one to get the updated list of licenses approved by from SPDX repository. This rule can be used to implement `OSPS-LE-02`. --- data-sources/{osi.yaml => spdx.yaml} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename data-sources/{osi.yaml => spdx.yaml} (95%) diff --git a/data-sources/osi.yaml b/data-sources/spdx.yaml similarity index 95% rename from data-sources/osi.yaml rename to data-sources/spdx.yaml index 63e05b7..4e6e6ea 100644 --- a/data-sources/osi.yaml +++ b/data-sources/spdx.yaml @@ -1,6 +1,6 @@ version: v1 type: data-source -name: osi +name: spdx context: {} rest: def: