Updating the license from Apache 2.0 to MPL 2.0

.copywrite.hcl

@@ -0,0 +1,17 @@
+schema_version = 1
+
+project {
+ license = "MPL-2.0"
+ copyright_holder = "Mondoo, Inc."
+ copyright_year = 2023
+
+ # (OPTIONAL) A list of globs that should not have copyright/license headers.
+ # Supports doublestar glob patterns for more flexibility in defining which
+ # files or folders should be ignored
+ header_ignore = [
+ "**/*.tf",
+ "**/testdata/**",
+ "**/*.pb.go",
+ "**/*_string.go",
+ ]
+}

.github/workflows/cla.yaml

@@ -1,9 +1,9 @@
-name: "CLA Assistant"
+name: "CLA Assistant & License Check"
 on:
  issue_comment:
  types: [created]
  pull_request_target:
- types: [opened,closed,synchronize]
+ types: [opened, closed, synchronize]
 
 jobs:
  CLAssistant:
@@ -14,13 +14,25 @@ jobs:
  uses: contributor-assistant/github-action@v2.3.0
  env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_ACCESS_TOKEN }}
+ PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ACCESS_TOKEN }}
  with:
- path-to-signatures: 'signatures/version1/cla.json'
- path-to-document: 'https://github.com/mondoohq/.github/blob/master/CLA.md'
- custom-pr-sign-comment: 'I have read the Mondoo CLA Document and I hereby sign the CLA'
- custom-notsigned-prcomment: 'Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text.'
+ path-to-signatures: "signatures/version1/cla.json"
+ path-to-document: "https://github.com/mondoohq/.github/blob/master/CLA.md"
+ custom-pr-sign-comment: "I have read the Mondoo CLA Document and I hereby sign the CLA"
+ custom-notsigned-prcomment: "Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text."
  remote-repository-name: cla
  remote-organization-name: mondoohq
- branch: 'main'
+ branch: "main"
  allowlist: mondoo-tools,github-actions[bot],dependabot[bot]
+
+ license-check:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v4
+
+ - name: Setup Copywrite
+ uses: hashicorp/setup-copywrite@v1.1.2
+
+ - name: Check Header Compliance
+ run: copywrite headers --plan

.goreleaser.yml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 ---
 env:
  - CGO_ENABLED=0