From 3c2e161f26f32e8b9e5ee0e8997b99d117e67dc2 Mon Sep 17 00:00:00 2001 From: David Karlsson <35727626+dvdksn@users.noreply.github.com> Date: Thu, 27 Jun 2024 15:08:51 +0200 Subject: [PATCH 1/2] scout: health score only consider AGPL Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com> --- content/scout/policy/scores.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/content/scout/policy/scores.md b/content/scout/policy/scores.md index 6e60aa32b6..7c7ed6f3e1 100644 --- a/content/scout/policy/scores.md +++ b/content/scout/policy/scores.md @@ -105,13 +105,16 @@ The policies that influence the score, and their respective weights, are as foll | Policy | Points | | --------------------------------------------------------------------------------------------------------- | ------ | -| [Fixable Critical and High Vulnerabilities](./_index.md#fixable-critical-and-high-vulnerabilities) | 20 | -| [High-Profile Vulnerabilities](./_index.md#high-profile-vulnerabilities) | 20 | -| [Supply Chain Attestations](./_index.md#supply-chain-attestations) | 15 | -| [Unapproved Base Images](./_index.md#unapproved-base-images) | 15 | -| [Outdated Base Images](./_index.md#outdated-base-images) | 10 | -| [Default Non-Root User](./_index.md#default-non-root-user) | 5 | -| [Copyleft Licenses](./_index.md#copyleft-licenses) | 5 | +| [Fixable critical and high vulnerabilities](./_index.md#fixable-critical-and-high-vulnerabilities) | 20 | +| [High-profile vulnerabilities](./_index.md#high-profile-vulnerabilities) | 20 | +| [Supply chain attestations](./_index.md#supply-chain-attestations) | 15 | +| [Unapproved base images](./_index.md#unapproved-base-images) | 15 | +| [Outdated base images](./_index.md#outdated-base-images) | 10 | +| [Default non-root user](./_index.md#default-non-root-user) | 5 | +| AGPL v3-licensed software \* | 5 | + +\* _The **AGPL v3-licensed software** policy is a subset of the +[Copyleft licenses](./_index.md#copyleft-licenses) policy._ ### Evaluation From 69319a6781cc5429145667441c0cdd1cca5b3fbb Mon Sep 17 00:00:00 2001 From: David Karlsson <35727626+dvdksn@users.noreply.github.com> Date: Thu, 27 Jun 2024 17:37:48 +0200 Subject: [PATCH 2/2] vale: add AGPL to vocabulary Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com> --- .github/vale/config/vocabularies/Docker/accept.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/vale/config/vocabularies/Docker/accept.txt b/.github/vale/config/vocabularies/Docker/accept.txt index 3d8e112c52..4956082d17 100644 --- a/.github/vale/config/vocabularies/Docker/accept.txt +++ b/.github/vale/config/vocabularies/Docker/accept.txt @@ -1,4 +1,4 @@ -A?GPLv3 +A?GPL(v3)? APIs? ARM AWS