|
1 | | -This LICENSES file is generated by the `licenses` module in makefile-modules. |
| 1 | +This LICENSES file is generated by the `licenses` module in makefile-modules[0]. |
2 | 2 |
|
3 | | -The licenses below the "---" are determined by the go-licenses tool. |
| 3 | +The licenses below the "---" are determined by the go-licenses tool[1]. |
4 | 4 |
|
5 | 5 | The aim of this file is to collect the licenses of all dependencies, and provide |
6 | 6 | a single source of truth for licenses used by this project. |
7 | 7 |
|
| 8 | +## For Developers |
| 9 | + |
8 | 10 | If CI reports that this file is out of date, you should be careful to check that the |
9 | 11 | new licenses are acceptable for this project before running `make generate-go-licenses` |
10 | 12 | to update this file. |
11 | 13 |
|
12 | | -Acceptable licenses are those allowlisted by the CNCF[0]. |
| 14 | +Acceptable licenses are those allowlisted by the CNCF[2]. |
13 | 15 |
|
14 | 16 | You MUST NOT add any new dependencies whose licenses are not allowlisted by the CNCF, |
15 | | -or which do not have an explicit license exception[1]. |
| 17 | +or which do not have an explicit license exception[3]. |
| 18 | + |
| 19 | +## For Users |
| 20 | + |
| 21 | +If this file was included in a release artifact, it is a snapshot of the licenses of all dependencies at the time of the release. |
| 22 | + |
| 23 | +You can retrieve the actual license text by following these steps: |
| 24 | + |
| 25 | +1. Find the dependency name in this file |
| 26 | +2. Go to the source code repository of this project, and go to the tag corresponding to this release. |
| 27 | +3. Find the exact version of the dependency in the `go.mod` file |
| 28 | +4. Search for the dependency at the correct version in the [Go package index](https://pkg.go.dev/). |
| 29 | + |
| 30 | +## Links |
16 | 31 |
|
17 | | -[0]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/policies-guidance/allowed-third-party-license-policy.md#cncf-allowlist-license-policy |
18 | | -[1]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/license-exceptions/README.md |
| 32 | +[0]: https://github.com/cert-manager/makefile-modules/ |
| 33 | +[1]: https://github.com/google/go-licenses |
| 34 | +[2]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/policies-guidance/allowed-third-party-license-policy.md#cncf-allowlist-license-policy |
| 35 | +[3]: https://github.com/cncf/foundation/blob/db4179134ebe7fa00b140a050c19147db808b6fa/license-exceptions/README.md |
19 | 36 |
|
20 | 37 | --- |
21 | 38 |
|
|
0 commit comments