Merge pull request #300 from SgtCoDFish/licenses-dist

Improve text in licenses template

Author: cert-manager-prow[bot]

modules/licenses/licenses.tmpl

@@ -1,21 +1,38 @@
-This LICENSES file is generated by the `licenses` module in makefile-modules.
+This LICENSES file is generated by the `licenses` module in makefile-modules[0].
 
-The licenses below the "---" are determined by the go-licenses tool.
+The licenses below the "---" are determined by the go-licenses tool[1].
 
 The aim of this file is to collect the licenses of all dependencies, and provide
 a single source of truth for licenses used by this project.
 
+## For Developers
+
 If CI reports that this file is out of date, you should be careful to check that the
 new licenses are acceptable for this project before running `make generate-go-licenses`
 to update this file.
 
-Acceptable licenses are those allowlisted by the CNCF[0].
+Acceptable licenses are those allowlisted by the CNCF[2].
 
 You MUST NOT add any new dependencies whose licenses are not allowlisted by the CNCF,
-or which do not have an explicit license exception[1].
+or which do not have an explicit license exception[3].
+
+## For Users
+
+If this file was included in a release artifact, it is a snapshot of the licenses of all dependencies at the time of the release.
+
+You can retrieve the actual license text by following these steps:
+
+1. Find the dependency name in this file
+2. Go to the source code repository of this project, and go to the tag corresponding to this release.
+3. Find the exact version of the dependency in the `go.mod` file
+4. Search for the dependency at the correct version in the [Go package index](https://pkg.go.dev/).
+
+## Links
 
-[0]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/policies-guidance/allowed-third-party-license-policy.md#cncf-allowlist-license-policy
-[1]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/license-exceptions/README.md
+[0]: https://github.com/cert-manager/makefile-modules/
+[1]: https://github.com/google/go-licenses
+[2]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/policies-guidance/allowed-third-party-license-policy.md#cncf-allowlist-license-policy
+[3]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/license-exceptions/README.md
 
 ---