The GitHub Actions job "Validate and test" on 
pekko-grpc.git/assembly-license-notice-1.3 has failed.
Run started by GitHub user pjfanning (triggered by pjfanning).

Head commit for run:
125f5f0cdcfc9c0abf6d0038da4461bbc4597ba7 / PJ Fanning 
<[email protected]>
Assert the shipped LICENSE and NOTICE still say something

Motivation:
`assemblyMetaInfCheck` only compared the archived files with the curated ones in
`legal/`, which says the merge strategy picked our copy but not that the copy is
still a real LICENSE or NOTICE. An emptied or truncated curated file would ship
and pass.

Modification:
Check the shipped bytes for the markers each file has to carry: the Apache
License 2.0 heading and terms plus the 3rd party section in LICENSE, and the
product name, the ASF attribution and the 3rd party section in NOTICE. Missing
markers are reported alongside the existing problems for that archive.

Result:
An assembly that ships a gutted LICENSE or NOTICE fails the check.

Tests:
- sbt checkAssemblyLicenses - passed for both assembly projects (jar and bat)
- With legal/AssemblyLicense.txt cut down to its first two lines,
  codegen/assemblyMetaInfCheck fails: "META-INF/LICENSE does not mention
  'TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION',
  'contain classes from 3rd party projects', 'Apache License Version 2.0:'"

References:
Refs #865

Report URL: https://github.com/apache/pekko-grpc/actions/runs/33387531391

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to