Enable cr_checker copyright check via pre-commit hook (#265)

* ci: enable cr_checker copyright check via pre-commit hook

* fix: add copyright headers to files missing SPDX block

* fix: add missing copyright header to overall_status.rst

* fix: remove broken copyright_checker Bazel target

* fix: add missing blank line after copyright block in overall_status.rst

doc: remove scrample references from ebclfsa documentation + update devcontainer (#269)

* chore: Bump devcontainer to v.1.7.0

* doc: remove scrample references in the EB clfsa documentation

The scrample code had been removed already but this document was forgotten.

upload sarif results to security tab (#260)

Co-authored-by: Frank Scholter Peres(MBTI) <145544737+FScholPer@users.noreply.github.com>

Integrate Time module (#273)

* Integrate Time module

* Deploy time examples

* Make sure qemu has enought permisisons

* Make exmplaes stop after time

Bump `score_bazel_cpp_toolchains` to the latest version (#274)

The latest version of toolchain provides support for coverage for QNX builds.

Signed-off-by: Nikola Radakovic <nikola.ra.radakovic@bmw.de>

Add QNX8 aarch64 build support (#241)

* Add QNX8 aarch64 build support

* review findings

* free more space

adding launch manager fit test cases

adding feature integration test cases for other requirements

removing hard fail conditions

updated documents

adding copilot reivew fixes

Fixed restart behavior on the same instance, Hardened shutdown race handling

updated the statement

 clearing self.process after shutdown

fixed pytest build environment issues

fixxing the python build issues

copyright fixes

Author: Subramanian-K812

.bazelrc

@@ -30,6 +30,11 @@ build:_common --@score_logging//score/datarouter/build_configuration_flags:enabl
 build:_common --@score_logging//score/datarouter/build_configuration_flags:file_transfer=False
 build:_common --@score_logging//score/datarouter/build_configuration_flags:use_local_vlan=True
 
+# ─── QNX common flags (shared by all QNX configs) ────────────────────────────
+build:_qnx_common --host_platform=@score_bazel_platforms//:x86_64-linux-gcc_12.2.0-posix
+build:_qnx_common --action_env=BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
+build:_qnx_common --incompatible_enable_cc_toolchain_resolution
+
 build:qnx-x86_64 --config=_common
 build:qnx-x86_64 --noexperimental_merged_skyframe_analysis_execution
 build:qnx-x86_64 --action_env=BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
@@ -41,6 +46,16 @@ build:qnx-x86_64 --extra_toolchains=@score_qcc_x86_64_toolchain//:x86_64-qnx-sdp
 build:qnx-x86_64 --extra_toolchains=@score_qnx_x86_64_ifs_toolchain//:ifs-x86_64-qnx-sdp_8.0.0
 build:qnx-x86_64 --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_pc_nto_qnx800
 
+# ─── QNX aarch64 cross-compilation config ────────────────────────────────────
+# Usage: bazel build --config=qnx-aarch64 //target
+build:qnx-aarch64 --config=_common
+build:qnx-aarch64 --config=_qnx_common
+build:qnx-aarch64 --platforms=@score_bazel_platforms//:aarch64-qnx-sdp_8.0.0-posix
+build:qnx-aarch64 --extra_toolchains=@score_qcc_aarch64_toolchain//:aarch64-qnx-sdp_8.0.0
+build:qnx-aarch64 --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_aarch64_unknown_nto_qnx800
+build:qnx-aarch64 --extra_toolchains=@score_qnx_aarch64_ifs_toolchain//:ifs-aarch64-qnx-sdp_8.0.0
+
+
 build:linux-x86_64 --config=_common
 build:linux-x86_64 --extra_toolchains=@score_gcc_x86_64_toolchain//:x86_64-linux-gcc_12.2.0
 build:linux-x86_64 --platforms=@score_bazel_platforms//:x86_64-linux-gcc_12.2.0-posix

.devcontainer/devcontainer.json

@@ -1,6 +1,6 @@
 {
   "name": "eclipse-s-core",
-  "image": "ghcr.io/eclipse-score/devcontainer:v1.3.0",
+  "image": "ghcr.io/eclipse-score/devcontainer:v1.7.0",
   "mounts": [
     "source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind"
   ],

.devcontainer/prepare_workspace.sh

@@ -1,4 +1,16 @@
 #!/bin/bash
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
 set -euo pipefail
 
 # Install pipx

.github/workflows/build_and_test_ebclfsa.yml

@@ -28,7 +28,7 @@ jobs:
     name: aarch64
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/eclipse-score/devcontainer:v1.1.0
+      image: ghcr.io/eclipse-score/devcontainer:v1.7.0
     steps:
       - name: Clean disk space
         uses: eclipse-score/more-disk-space@v1

.github/workflows/codeql-multiple-repo-scan.yml

@@ -68,6 +68,7 @@ jobs:
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v4
         with:
+          upload: false
           upload-database: false
           output: sarif-results/
           category: "multi-repo-scan"
@@ -94,6 +95,11 @@ jobs:
             exit 1
           fi
           sarif html "$SARIF_FILE" --output codeql-report.html
+      - name: Upload SARIF to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: sarif-results/cpp.sarif
+          category: "multi-repo-scan"
       - name: Upload SARIF results as artifact
         uses: actions/upload-artifact@v4
         with:

.github/workflows/copyright.yml

@@ -0,0 +1,35 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+name: Copyright check
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+  merge_group:
+    types: [checks_requested]
+jobs:
+  copyright-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Set up Python 3
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      # Runs the `copyright` hook from .pre-commit-config.yaml (cr_checker from
+      # eclipse-score/tooling). The hook reports any file missing a copyright
+      # header and fails the job, gating PRs without touching Bazel.
+      - name: Run cr_checker via pre-commit
+        uses: pre-commit/action@v3.0.1
+        with:
+          extra_args: copyright --all-files

.github/workflows/test_and_docs.yml

@@ -40,7 +40,9 @@ jobs:
       pull-requests: write
     steps:
       - name: Clean disk space
-        uses: eclipse-score/more-disk-space@v1
+        uses: eclipse-score/more-disk-space@v1.1
+        with:
+          level: 4
       - name: Setup Bazel
         uses: bazel-contrib/setup-bazel@0.18.0
         with:

.pre-commit-config.yaml

@@ -0,0 +1,26 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+# Runs cr_checker (copyright header check) directly from the eclipse-score/tooling
+# repo as a pre-commit hook, instead of via the Bazel `//:copyright` target.
+#
+# Rationale (see https://github.com/eclipse-score/reference_integration/issues/166):
+# the Bazel target pulls in the docs() -> needs_json -> @score_process graph, which
+# fails to resolve because score_process/score_platform are dev_dependencies in the
+# score modules and are therefore invisible when reference_integration aggregates
+# them. The pre-commit hook runs the checker as a standalone script over the repo's
+# files, so it is unaffected by Bazel module resolution.
+repos:
+  - repo: https://github.com/eclipse-score/tooling
+    rev: 31ff8eee214e4e97ef8f5cb46e443273515b63ec
+    hooks:
+      - id: copyright

.vscode/rustfmt.sh

@@ -1,3 +1,15 @@
 #!/usr/bin/env bash
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
 
 bazel run @score_tooling//format_checker:rustfmt_with_policies

BUILD

@@ -12,7 +12,7 @@
 # *******************************************************************************
 
 load("@score_docs_as_code//:docs.bzl", "docs")
-load("@score_tooling//:defs.bzl", "copyright_checker", "setup_starpls", "use_format_targets")
+load("@score_tooling//:defs.bzl", "setup_starpls", "use_format_targets")
 
 # Docs-as-code
 docs(
@@ -41,27 +41,6 @@ setup_starpls(
     visibility = ["//visibility:public"],
 )
 
-# Copyright check
-copyright_checker(
-    name = "copyright",
-    srcs = [
-        ".github",
-        "bazel_common",
-        "docs",
-        "feature_integration_tests",
-        "images",
-        "runners",
-        "rust_coverage",
-        "scripts",
-        "showcases",
-        "//:BUILD",
-        "//:MODULE.bazel",
-    ],
-    config = "@score_tooling//cr_checker/resources:config",
-    template = "@score_tooling//cr_checker/resources:templates",
-    visibility = ["//visibility:public"],
-)
-
 # Add target for formatting checks
 use_format_targets()