Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reject pull requests that change imported licenses #109

Merged
merged 3 commits into from
Oct 11, 2024
Merged

Reject pull requests that change imported licenses #109

merged 3 commits into from
Oct 11, 2024

Commits on Oct 10, 2024

  1. Replace license text with its SPDX identifier 

    The SPDX identifier is easier to manage than boilerplate text and is
recognized by tools that scan for license compliance.

Issue: PGO-1564
See: https://reuse.software/
See: https://spdx.dev/learn/handling-license-info/
    @cbandy
    cbandy committed Oct 10, 2024
    Configuration menu
    Copy the full SHA
    94227b5 View commit details
    Browse the repository at this point in the history

  2. Reject pull requests that change imported licenses 

    We import dependencies that use a handful of open-source licenses.
We want to be intentional about any change to these licenses, so this
automation flags pull requests that do so.

Issue: PGO-1563
    @cbandy
    cbandy committed Oct 10, 2024
    Configuration menu
    Copy the full SHA
    0106de9 View commit details
    Browse the repository at this point in the history

  3. Run CodeQL security analysis on schedule and push

    @cbandy
    cbandy committed Oct 10, 2024
    Configuration menu
    Copy the full SHA
    353ed0a View commit details
    Browse the repository at this point in the history