From b1786e6aeed2a01950b32529b55cda1771f6e8c9 Mon Sep 17 00:00:00 2001
From: Francois Marier <francois@brave.com>
Date: Tue, 14 May 2024 17:32:29 -0700
Subject: [PATCH] Move license-related hotwords to a rule

---
 action.yml                                 |  4 ----
 assets/semgrep_rules/client/licensing.html | 17 +++++++++++++++++
 assets/semgrep_rules/client/licensing.txt  |  4 ++++
 assets/semgrep_rules/client/licensing.yaml |  9 +++++++++
 4 files changed, 30 insertions(+), 4 deletions(-)
 create mode 100644 assets/semgrep_rules/client/licensing.html
 create mode 100644 assets/semgrep_rules/client/licensing.txt
 create mode 100644 assets/semgrep_rules/client/licensing.yaml

diff --git a/action.yml b/action.yml
index 55d3b279..1673a4c2 100644
--- a/action.yml
+++ b/action.yml
@@ -40,10 +40,6 @@ inputs:
       urlparse
       :disableDigestUpdates
       pinDigest
-      NonCommercial
-      NoDerivs
-      BY-NC
-      BY-ND
   debug:
     description: enables debug output for this action
     required: false
diff --git a/assets/semgrep_rules/client/licensing.html b/assets/semgrep_rules/client/licensing.html
new file mode 100644
index 00000000..092726cd
--- /dev/null
+++ b/assets/semgrep_rules/client/licensing.html
@@ -0,0 +1,17 @@
+<p xmlns:cc="http://creativecommons.org/ns#" xmlns:dct="http://purl.org/dc/terms/">
+  <a property="dct:title" rel="cc:attributionURL" href="https://example.com">
+    The following JavaScript library
+  </a>
+  by
+  <a rel="cc:attributionURL dct:creator" property="cc:attributionName" href="https://john.example.com">
+    John Doe
+  </a>
+  is licensed under
+  <a href="https://creativecommons.org/licenses/by-nc/4.0/?ref=chooser-v1" target="_blank" rel="license noopener noreferrer" style="display:inline-block;">
+    // ruleid: license-nonfree
+    CC BY-NC 4.0
+    <img style="height:22px!important;margin-left:3px;vertical-align:text-bottom;" src="https://mirrors.creativecommons.org/presskit/icons/cc.svg?ref=chooser-v1" alt="">
+    <img style="height:22px!important;margin-left:3px;vertical-align:text-bottom;" src="https://mirrors.creativecommons.org/presskit/icons/by.svg?ref=chooser-v1" alt="">
+    <img style="height:22px!important;margin-left:3px;vertical-align:text-bottom;" src="https://mirrors.creativecommons.org/presskit/icons/nc.svg?ref=chooser-v1" alt="">
+  </a>
+</p>
diff --git a/assets/semgrep_rules/client/licensing.txt b/assets/semgrep_rules/client/licensing.txt
new file mode 100644
index 00000000..2117749c
--- /dev/null
+++ b/assets/semgrep_rules/client/licensing.txt
@@ -0,0 +1,4 @@
+// ruleid: license-nonfree
+This logo is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International license.
+
+See LICENSE.txt for more details.
diff --git a/assets/semgrep_rules/client/licensing.yaml b/assets/semgrep_rules/client/licensing.yaml
new file mode 100644
index 00000000..bd4c7920
--- /dev/null
+++ b/assets/semgrep_rules/client/licensing.yaml
@@ -0,0 +1,9 @@
+rules:
+  - id: license-nonfree
+    message: "Non-free license detected"
+    severity: ERROR
+    languages:
+      - regex
+    patterns:
+      # ruleid: license-nonfree
+      - pattern-regex: (NonCommercial|NoDerivs|BY-NC|BY-ND)