2019-09-11 ODP WG Meeting notes
Table of Contents
Date/Time
Wednesday, 2019-09-11, 12am ET
Attendees
Name | Organisation |
---|---|
Maurizio Pillitu | FINOS |
Former user (Deleted) | Morgan Stanley |
James McLeod (Unlicensed) | FINOS |
Deepak Mehta | FOSSA |
Aitana Myohl | FINOS |
Rob Underwood (Deactivated) | FINOS |
Attendee Webex Screenshot
Outstanding Action Items
Description | Due date | Assignee | Task appears on |
---|---|---|---|
| 2019-12-18 ODP WG Meeting notes | ||
| 2019-12-18 ODP WG Meeting notes | ||
| James McLeod (Unlicensed) | 2019-10-9 ODP WG Meeting notes | |
2019-08-28 ODP WG Meeting notes | |||
| 2019-08-28 ODP WG Meeting notes | ||
| 2019-08-14 ODP WG Meeting notes |
Agenda
Time | Item | Who | Notes from the Meeting |
---|---|---|---|
5 mins | Convene & Roll Call | Former user (Deleted) | |
5 mins | Welcome James! | James McLeod (Unlicensed) | James is the new FINOS Community Director |
10 mins | FOSSA |
| |
15 mins | WhiteSource Webinar on Wednesday November 6 | Maurizio Pillitu |
|
5 mins | Retrospective on current sprint | Group | |
10 mins | Next Sprint priorities | Group | |
10 mins | Backlog scrubbing | Group | |
5 | AOB & adjourn | Group |
FOSSA GitHub Action - (mao proposal)
Build a standard GitHub action that reacts on commits and Pull Requests (PRs) on a given GitHub repository, called FOSSA GitHub Action.
Every time that a commit is pushed or a PR is merged, the FOSSA GitHub Action is triggered, the action
- Reads a
.fossa-licenses.yaml
file, containing - A list of SPDX IDs called "compatibleLicenses"
- A list of SPDX IDs called "incompatibleLicenses"
- A list of strings called "whitelistedLibraries"
- ... (more will come after the MVP)
- Reads the
FOSSA_API_KEY
(encrypted) environment variable, containing the key of FINOS account - Invokes "
fossa init
" and "fossa report licenses --json
", generating a JSON payload with all library and license definitions - Parses the generated JSON (on step 5) and builds a report with
- List of libraries with compatible licenses (and the compatible license that applies)
- List of libraries with incompatible licenses
- List of libraries with unknown licenses
- Format the report in Markdown and post on a new github issue. If the action was triggered by a PR, the check will succeed or fail based on the amount of incompatible /unknown licenses found
Action Items
Need help? Email help@finos.org
we'll get back to you.
Content on this page is licensed under the CC BY 4.0 license.
Code on this page is licensed under the Apache 2.0 license.