I'm integrating the FOSSA CLI here: https://github.com/apache/incubator-superset/pull/7999
Once it runs once it looks like it's possible to set up watch branches. I added `master` there so it should stay in sync. https://app.fossa.com/projects/custom%2B11342%2Fgit%40github.com%3Aapache%2Fincubator-superset.git/refs/branch/master/b380879c41e785efbaa155a5b20254f619f08093 Max On Mon, Aug 5, 2019 at 9:30 AM Maxime Beauchemin <[email protected]> wrote: > Here's the INFRA ticket for FOSSA: > https://issues.apache.org/jira/browse/INFRA-18719 > Comment from ASF Infra: "Unfortunately, this requires permissions we can't > allow, namely repo:write and webhook/service:write" > > The CLI is probably the best path forward. > > Max > > On Sun, Aug 4, 2019 at 12:19 AM Bolke de Bruin <[email protected]> wrote: > >> Hi Max, >> >> Let me see if I can help with the trademark stuff and with legal for PIL. >> This will be after the 12th as I'm traveling without a real keyboard ;-). >> >> BTW fossa says they only need write permissions to private repo's on >> GitHub. Did you check that? INFRA loves very specific how-to's they might >> have checked the wrong docs ... As an alternative fossa also has a command >> line tool you could integrate with Travis: >> https://docs.fossa.com/docs/importing-a-project >> >> B. >> >> Sent from my iPhone >> >> > On 3 Aug 2019, at 01:18, Maxime Beauchemin <[email protected]> >> wrote: >> > >> > Sounds good, if someone can identify how to validate / invalidate the >> PIL >> > license for pillow with the ASF that'd be helpful (starting a thread >> with >> > legal@? jira ticket with legal-discuss?). >> > >> > Also if someone could do or coordinate the trademark search (required to >> > graduate out of incubation) that'd be AMAZING. That was my attempt at >> it: >> > https://issues.apache.org/jira/browse/PODLINGNAMESEARCH-124 >> > >> > More info about it here: >> > https://incubator.apache.org/guides/names.html >> > >> > >> > >> >> On Fri, Aug 2, 2019 at 12:57 PM Charles Givre <[email protected]> >> wrote: >> >> >> >> Hi Maxime >> >> I’m PMC Chair for Apache Drill and would love to help out with >> automating >> >> the release process. I’m at a conference next week but can we talk >> after >> >> that? >> >> >> >> Sent from my iPhone >> >> >> >>>> On Aug 2, 2019, at 15:37, Maxime Beauchemin < >> [email protected]> >> >>> wrote: >> >>> >> >>> Hi all, >> >>> >> >>> Let's push towards our first ASF release. We've been stuck for a long >> >> time >> >>> now and it's hurting the community. >> >>> >> >>> I've done a fair amount of work in that direction (most notably here >> >>> https://github.com/apache/incubator-superset/pull/7539), and I'm >> trying >> >> to >> >>> capture the last few blockers here: >> >>> https://github.com/apache/incubator-superset/issues/7974 >> >>> >> >>> Using FOSSA >> >>> < >> >> >> https://app.fossa.com/projects/git%2Bgithub.com%2Fmistercrunch%2Fsuperset/refs/branch/master/cbac428b28ed3a20dcc253030269c9c9d60e3f5c/issues/licensing?filter=policy_flag&revisionScanId=872239 >> >>> >> >>> has been very helpful to sort out licenses, but we've been denied >> setting >> >>> it up on the repo by ASF-infra. For now I'm thinking we can run it >> >> manually >> >>> on forks when crafting a release. From my understanding, the last >> license >> >>> to clear is PIL for python's Pillow lib. Or we could make the dep >> >> optional >> >>> somehow. >> >>> >> >>> I'd love to get help around automating / facilitating the release >> >> process, >> >>> and I'm even contemplating compensating someone who could "own it" and >> >> take >> >>> this on regularly, if necessary. >> >>> >> >>> Any volunteers!? >> >>> >> >>> Max >> >> >> >
