Merge pull request #12 from acompany-develop/imamura/ci/spdx

ci: add spdx workflow

Author: hyperfinitism

.github/workflows/spdx.yml

@@ -0,0 +1,20 @@
+name: spdx
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  check-spdx-headers:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: enarx/spdx@master
+      with:
+        licenses: MIT

examples/display.py

@@ -1,8 +1,10 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: MIT
 
 """
 Example usage of pysnputils.
 """
+
 from __future__ import annotations
 
 import argparse

examples/fetch.py

@@ -1,8 +1,10 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: MIT
 
 """
 Example usage of pysnputils.fetch.
 """
+
 from __future__ import annotations
 
 import argparse

examples/verify.py

@@ -1,8 +1,10 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: MIT
 
 """
 Verify SNP attestation reports and VCEK certificate chains.
 """
+
 from __future__ import annotations
 
 import argparse

pysnputils/__init__.py

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 """
 pysnputils - Python utilities for AMD SEV-SNP attestation.
 """

pysnputils/fetch.py

@@ -1,6 +1,7 @@
+# SPDX-License-Identifier: MIT
+
 """
-Fetch VCEK certificate chains from AMD KDS.
-AMD KDS Revision: 1.00 (January 2025)
+Fetch VCEK certificate chains and CRLs from AMD KDS.
 """
 
 __all__ = [

pysnputils/types.py

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 """
 AMD SEV-SNP Attestation Report Type Definitions.
 """

pysnputils/verify.py

@@ -1,3 +1,5 @@
+# SPDX-License-Identifier: MIT
+
 """
 Verify SNP attestation reports and VCEK certificate chains.
 """