Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-22854

Go module missing license file, identifiers

XMLWordPrintable

    • Product delivery backlog, Sprint 102 (Jul 2023), Sprint 103 (Aug 2023), Sprint 104 (Sep 2023), Sprint 105 (Oct 2023), Sprint 106 (Nov 2023), Sprint 107 (Dec 2023), S2401
    • 1

      While generating SBOMs for the agent, using CycloneDX's cyclonedx-gomod utility, and asking for license detection, the utility warns that the go module zabbix.com has no license information.

      The utility uses go-enry's go-license-detector library the perform the detection. The library uses this algorithm to perform the detection.

      From what I can tell, this is in line with how licensing information is declared and provided in the majority of projects employing Go.

      The Go project have a general policy for how a license should be specified for a module, which should be followed to allow tools for reliable license detection.

      Additionally, it seems that the agent module doesn't have a name, except a vendor string zabbix.com, which makes it ambiguous.

      We should add the appropriate license to the module root.

            jlambda Juris Lambda
            jlambda Juris Lambda
            Team C
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated: