Fix verify-licenses script

This commit is contained in:
Jordan Liggitt 2023-01-04 15:45:41 -05:00
parent 4e785dc7e3
commit cafc791aab
No known key found for this signature in database

View File

@ -51,23 +51,14 @@ packages_flagged=()
packages_url_missing=()
exit_code=0
git remote add licenses https://github.com/kubernetes/kubernetes >/dev/null 2>&1 || true
# Install go-licenses
echo '[INFO] Installing go-licenses...'
pushd "${KUBE_TEMP}" >/dev/null
git clone https://github.com/google/go-licenses.git >/dev/null 2>&1
cd go-licenses
go build -o "${GOPATH}/bin"
popd >/dev/null
go install github.com/google/go-licenses@latest
# Fetching CNCF Approved List Of Licenses
# Refer: https://github.com/cncf/foundation/blob/main/allowed-third-party-license-policy.md
curl -s 'https://spdx.org/licenses/licenses.json' -o "${KUBE_TEMP}"/licenses.json
number_of_licenses=$(jq '.licenses | length' "${KUBE_TEMP}"/licenses.json)
loop_index_length=$(( number_of_licenses - 1 ))
@ -85,8 +76,7 @@ done
# Scanning go-packages under the project & verifying against the CNCF approved list of licenses
echo '[INFO] Starting license scan on go-packages...'
go-licenses csv --git_remote licenses ./... >> "${KUBE_TEMP}"/licenses.csv 2>/dev/null
go-licenses report ./... >> "${KUBE_TEMP}"/licenses.csv
echo -e 'PACKAGE_NAME LICENSE_NAME LICENSE_URL\n' >> "${KUBE_TEMP}"/approved_licenses.dump
while IFS=, read -r GO_PACKAGE LICENSE_URL LICENSE_NAME