-
Problem report
-
Resolution: Fixed
-
Major
-
7.0.0alpha2
-
None
-
Product delivery backlog, Sprint 102 (Jul 2023), Sprint 103 (Aug 2023), Sprint 104 (Sep 2023), Sprint 105 (Oct 2023), Sprint 106 (Nov 2023), Sprint 107 (Dec 2023), S2401
-
1
While generating SBOMs for the agent, using CycloneDX's cyclonedx-gomod utility, and asking for license detection, the utility warns that the go module zabbix.com has no license information.
The utility uses go-enry's go-license-detector library the perform the detection. The library uses this algorithm to perform the detection.
From what I can tell, this is in line with how licensing information is declared and provided in the majority of projects employing Go.
The Go project have a general policy for how a license should be specified for a module, which should be followed to allow tools for reliable license detection.
Additionally, it seems that the agent module doesn't have a name, except a vendor string zabbix.com, which makes it ambiguous.
We should add the appropriate license to the module root.
- is duplicated by
-
ZBX-23065 Go agent does not have a license
- Closed