-
Notifications
You must be signed in to change notification settings - Fork 567
Closed
Labels
check/LicensegitlabIssue related to Scorecard's GitLab clientIssue related to Scorecard's GitLab clientkind/bugSomething isn't workingSomething isn't working
Description
Describe the bug
When having the Apache 2.0 license placed at the root of a GitLab repo, it is not recognized as an "FSF or OSI recognized license"
Reproduction steps
Steps to reproduce the behavior:
- Place Apache 2.0 license (c.f. https://www.apache.org/licenses/LICENSE-2.0.html) at the root of the repo
- Run
export SCORECARD_EXPERIMENTAL=1
- Run
export GITLAB_AUTH_TOKEN=<token>
- Run
scorecard --repo https://gitlab.com/<namespace>/<repo> --commit <commit id> --checks=License,Code-Review,Maintained,Security-Policy,Binary-Artifacts,Vulnerabilities,Pinned-Dependencies --show-details
- Observe output about license, telling a score 9/10 and saying:
Info: License file found in expected location: LICENSE:1
Warn: Any licence detected not an FSF or OSI recognized license: LICENSE:1
Expected behavior
Getting a 10/10 rating with no complaints.
Additional context
Scorecard version: v4.11.0
Reproduced on: Debian 11.x x86 architecure, macOS Ventura ARM architecture
Metadata
Metadata
Assignees
Labels
check/LicensegitlabIssue related to Scorecard's GitLab clientIssue related to Scorecard's GitLab clientkind/bugSomething isn't workingSomething isn't working