Skip to content

BUG: Apache 2.0 license not recognized #3333

@anotherbridge

Description

@anotherbridge

Describe the bug
When having the Apache 2.0 license placed at the root of a GitLab repo, it is not recognized as an "FSF or OSI recognized license"

Reproduction steps
Steps to reproduce the behavior:

  1. Place Apache 2.0 license (c.f. https://www.apache.org/licenses/LICENSE-2.0.html) at the root of the repo
  2. Run export SCORECARD_EXPERIMENTAL=1
  3. Run export GITLAB_AUTH_TOKEN=<token>
  4. Run scorecard --repo https://gitlab.com/<namespace>/<repo> --commit <commit id> --checks=License,Code-Review,Maintained,Security-Policy,Binary-Artifacts,Vulnerabilities,Pinned-Dependencies --show-details
  5. Observe output about license, telling a score 9/10 and saying:
Info: License file found in expected location: LICENSE:1  
Warn: Any licence detected not an FSF or OSI recognized license: LICENSE:1

Expected behavior
Getting a 10/10 rating with no complaints.

Additional context
Scorecard version: v4.11.0
Reproduced on: Debian 11.x x86 architecure, macOS Ventura ARM architecture

Metadata

Metadata

Assignees

Labels

check/LicensegitlabIssue related to Scorecard's GitLab clientkind/bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions