Adding exceptions approved from 8-31

Signed-off-by: amye@linuxfoundation.org
This commit is contained in:
Amye Scavarda Perrin 2023-09-08 14:04:12 -07:00
parent b2f4da0397
commit 74d3f58cc0
2 changed files with 74 additions and 0 deletions

View File

@ -0,0 +1,22 @@
[
{
"package": "github.com/docker/go-metrics",
"license": "CC-BY-SA 4.0",
"comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31"
},
{
"package": "github.com/hashicorp/go-memdb",
"license": "MPL-2.0 ",
"comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31"
},
{
"package": "github.com/shoenig/go-m1cpu",
"license": "MPL-2.0 ",
"comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31"
},
{
"package": "hashicorp/packer-plugin-sdk",
"license": "MPL-2.0 ",
"comment": "not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31"
}
]

View File

@ -0,0 +1,52 @@
SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: cncf-exceptions-2023-08-31
DocumentNamespace: https://github.com/cncf/foundation/license-exceptions-2023-08-31
Creator: Organization: CNCF
Created: 2023-09-8T13:52:00Z
##### Package: docker/go-metrics
PackageName: docker/go-metrics
SPDXID: SPDXRef-Package2
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: CC-BY-SA 4.0
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31
##### Package: hashicorp/go-memdb
PackageName: hashicorp/go-memdb
SPDXID: SPDXRef-Package3
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: MPL-2.0
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31
##### Package: shoenig/go-m1cpu
PackageName: shoenig/go-m1cpu
SPDXID: SPDXRef-Package4
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: MPL-2.0
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31
##### Package: hashicorp/packer-plugin-sdk
PackageName: hashicorp/packer-plugin-sdk
SPDXID: SPDXRef-Package5
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageLicenseConcluded: MPL-2.0
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageComment: not auto-allowlist because: Non-allowlist license(s); approved by GB exception 2023-08-31