From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.groups.io (mail02.groups.io [66.175.222.108]) by spool.mail.gandi.net (Postfix) with ESMTPS id 95567D80851 for ; Sat, 28 Oct 2023 11:51:28 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=239A8AwZaVbdhptjpTW4hJ8Wp3Nry8PdJOVvpoww9pU=; c=relaxed/simple; d=groups.io; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From:In-Reply-To:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Language:Content-Type:Content-Transfer-Encoding; s=20140610; t=1698493887; v=1; b=ZZSPwDcXyINJ6YfzBS0DiWQyL1n0PAwX8a+C9Ni4d303aNY8ruRcxEpP2hxnLRtQO9tb/wNk Al6RCgeAQqWVctikMHZp+mGwsomj2NDWVj9WfNXlEAnGmCmZyvpWyg+t9LXgVe13vu4mPcf37UX 4igQmYjfAfJBVv7V5LKEF9Yk= X-Received: by 127.0.0.2 with SMTP id VVquYY7687511xuHTloJ1Mpq; Sat, 28 Oct 2023 04:51:27 -0700 X-Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by mx.groups.io with SMTP id smtpd.web10.16501.1698493886345219071 for ; Sat, 28 Oct 2023 04:51:26 -0700 X-Received: from mimecast-mx02.redhat.com (mimecast-mx02.redhat.com [66.187.233.88]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-590-UZ_L1n_tP02WBSPe8V2yEQ-1; Sat, 28 Oct 2023 07:51:23 -0400 X-MC-Unique: UZ_L1n_tP02WBSPe8V2yEQ-1 X-Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.rdu2.redhat.com [10.11.54.5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id C5B1285CBE1; Sat, 28 Oct 2023 11:51:22 +0000 (UTC) X-Received: from [10.39.192.70] (unknown [10.39.192.70]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 71E375027; Sat, 28 Oct 2023 11:51:21 +0000 (UTC) Message-ID: Date: Sat, 28 Oct 2023 13:51:20 +0200 MIME-Version: 1.0 Subject: Re: [edk2-devel] CodeQL and Apache Licensed Files To: devel@edk2.groups.io, mikuback@linux.microsoft.com, "Kinney, Michael D" , 'Leif Lindholm' , 'Andrew Fish' Cc: 'Sean Brogan' , Gerd Hoffmann , Oliver Steffen References: <76c83798-2e7e-42df-bd10-673785b987f9@linux.microsoft.com> From: "Laszlo Ersek" In-Reply-To: <76c83798-2e7e-42df-bd10-673785b987f9@linux.microsoft.com> X-Scanned-By: MIMEDefang 3.4.1 on 10.11.54.5 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Reply-To: devel@edk2.groups.io,lersek@redhat.com List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: X-Gm-Message-State: cz436b5bdIe8OvKzLILOyg0Xx7686176AA= Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=20140610 header.b=ZZSPwDcX; spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce@groups.io; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=redhat.com (policy=none) On 10/27/23 23:11, Michael Kubacki wrote: > I'd like to bring attention to Apache License 2.0 code in the CodeQL > series I sent to the mailing list for steward review. >=20 > In particular, the files in the BaseTools/Plugin/CodeQL/analyze > directory of this patch: >=20 > https://edk2.groups.io/g/devel/message/109696 >=20 > Please let me know if any next steps are needed. (1) I don't know if edk2 accepts contributions under Apache License 2.0; just want to point out that this license is acceptable in Fedora (and so RHEL too), per . Assuming we're talking about "Apache Software License 2.0". (2) Should we extend "License Details" and "Code Contributions" in "ReadMe.rst"? (3) Should the new files (under Apache License 2.0) use an SPDX identifier tag, for easy greppability? (4) With the addition, downstream packages (such as RPMs in Fedora and RHEL) might want to spell out the short SPDX identifier of the new license too in their License: tags. Laszlo -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#110243): https://edk2.groups.io/g/devel/message/110243 Mute This Topic: https://groups.io/mt/102230244/7686176 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/leave/12367111/7686176/19134562= 12/xyzzy [rebecca@openfw.io] -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-