This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven.git
commit 66cccae57766545125abd5effd98219f0c896145 Author: Jarek Potiuk <[email protected]> AuthorDate: Sat Jul 4 15:29:19 2026 +0200 Use the full Apache license header on the scaffold files; drop .ratignore apache-rat 0.13 (still used by some PMC repos) does not recognise the short SPDX identifier, and newer RAT flags the .ratignore file itself. Switching the generated THREAT_MODEL.md / SECURITY.md / AGENTS.md to the full AL-2.0 header (HTML comment) makes them pass the license check on every RAT version, so the .ratignore exemption is no longer needed. Generated-by: Claude Code --- .ratignore | 5 ----- AGENTS.md | 20 ++++++++++++++++++-- SECURITY.md | 20 ++++++++++++++++++-- THREAT_MODEL.md | 20 ++++++++++++++++++-- 4 files changed, 54 insertions(+), 11 deletions(-) diff --git a/.ratignore b/.ratignore deleted file mode 100644 index 0970a5fa59..0000000000 --- a/.ratignore +++ /dev/null @@ -1,5 +0,0 @@ -# Security-model scaffold (carries an SPDX header; exempted -# from RAT for setups that don't scan Markdown headers). -THREAT_MODEL.md -SECURITY.md -AGENTS.md diff --git a/AGENTS.md b/AGENTS.md index 42b607562e..476af50162 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -1,5 +1,21 @@ -<!-- SPDX-License-Identifier: Apache-2.0 - https://www.apache.org/legal/release-policy.html --> +<!-- +Licensed to the Apache Software Foundation (ASF) under one +or more contributor license agreements. See the NOTICE file +distributed with this work for additional information +regarding copyright ownership. The ASF licenses this file +to you under the Apache License, Version 2.0 (the +"License"); you may not use this file except in compliance +with the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, +software distributed under the License is distributed on an +"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +KIND, either express or implied. See the License for the +specific language governing permissions and limitations +under the License. +--> # Agent Guide for maven diff --git a/SECURITY.md b/SECURITY.md index c4fce8e7dd..ca88a730d7 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,5 +1,21 @@ -<!-- SPDX-License-Identifier: Apache-2.0 - https://www.apache.org/legal/release-policy.html --> +<!-- +Licensed to the Apache Software Foundation (ASF) under one +or more contributor license agreements. See the NOTICE file +distributed with this work for additional information +regarding copyright ownership. The ASF licenses this file +to you under the Apache License, Version 2.0 (the +"License"); you may not use this file except in compliance +with the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, +software distributed under the License is distributed on an +"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +KIND, either express or implied. See the License for the +specific language governing permissions and limitations +under the License. +--> # Security Policy diff --git a/THREAT_MODEL.md b/THREAT_MODEL.md index f380fd1a55..ad87a29b13 100644 --- a/THREAT_MODEL.md +++ b/THREAT_MODEL.md @@ -1,5 +1,21 @@ -<!-- SPDX-License-Identifier: Apache-2.0 - https://www.apache.org/legal/release-policy.html --> +<!-- +Licensed to the Apache Software Foundation (ASF) under one +or more contributor license agreements. See the NOTICE file +distributed with this work for additional information +regarding copyright ownership. The ASF licenses this file +to you under the Apache License, Version 2.0 (the +"License"); you may not use this file except in compliance +with the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, +software distributed under the License is distributed on an +"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +KIND, either express or implied. See the License for the +specific language governing permissions and limitations +under the License. +--> # Apache Maven — Umbrella Threat Model (v0 DRAFT)
