Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

reporter: Add volkswagen group custom reports #5518

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

porsche-rbieniek
Copy link

@porsche-rbieniek porsche-rbieniek commented Jul 4, 2022

The Volkswagen group is using two additional report formats, one based on Excel and the other one based on JSON.

We provide the reporter implementations on a as-is basis to allow interested third parties to submit FOSS compliance reports in a format already understood by the relevant legal depatments.

This PR is blacked by #5504 and #5517

In German law, the author and the copyright holder can be two seperate
legal entities and therefore also need to be treated separately.

Introduce a new copyright holder field that is now the primary source
for copyright holder information. Authors are still only used as
copyright holders if the `addAuthorsToCopyrights` option is enabled.

For now, all package manager implementations set empty copyright
holders. Filling the copyright holder field is left as an exercise for
future actions. Right now, the only way to add copyright holders is via
curations.

This change resolves oss-review-toolkit#4519.

Signed-off-by: Rainer Bieniek <[email protected]>
This change refines the capability to determine the source of a
copyright statement in the reporter stage.

The fact that the German copyright laws separate between an author and a
copyright holder influence the decision on wether a copyright statement
is emitted in the final result or if it is suppressed due to its source

This change introduces three different sources for a copyright statement:

- Determined by the scanner
- Provided by curation
- Synthesized from the author

Signed-off-by: Rainer Bieniek <[email protected]>
The reporters added in this change generate formats used within the Volkswagen
group for submission to the law firms for FOSS compliance evaluation.

There are two report formats in use:

- An Excel-based format which is the current standard format.
- A JSON-based formats which will eventually become the standard format.

Signed-off-by: Rainer Bieniek <[email protected]>
@porsche-rbieniek porsche-rbieniek requested a review from a team as a code owner July 4, 2022 09:57
@porsche-rbieniek porsche-rbieniek changed the title Feature/add volkswagen group custom reports Add volkswagen group custom reports Jul 4, 2022
@porsche-rbieniek porsche-rbieniek changed the title Add volkswagen group custom reports reporter: Add volkswagen group custom reports Jul 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant