Skip to content

Commit bd5f357

Browse files
committed
license-scan: add latest spdx license data
The latest SPDX data includes the Pixar license, which is a modified Apache-2.0 license. This rare license often confuses the scanner when it encounters the common Apache-2.0 license, so a new config option `spdx.ignore-licenses` has been added to ignore specific licenses from the input SPDX data. This change also adds the ability to skip directories when scanning sources. This is useful for scanning the source directory filled with sample license texts in the spdx crate itself.
1 parent 21883fd commit bd5f357

File tree

7 files changed

+291
-69
lines changed

7 files changed

+291
-69
lines changed

configs/cargo-deny/clarify.toml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,10 @@
1+
[spdx]
2+
ignore-licenses = [
3+
# Apache-2.0 is often misclassified as Pixar, which is a significantly more rare
4+
# https://github.com/jpeddicord/askalono/issues/94
5+
"Pixar"
6+
]
7+
18
[clarify.askalono]
29
expression = "Apache-2.0"
310
license-files = [

configs/cargo-make/clarify.toml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,10 @@
1+
[spdx]
2+
ignore-licenses = [
3+
# Apache-2.0 is often misclassified as Pixar, which is a significantly more rare
4+
# https://github.com/jpeddicord/askalono/issues/94
5+
"Pixar"
6+
]
7+
18
[clarify.bstr]
29
expression = "(MIT OR Apache-2.0) AND Unicode-DFS-2016"
310
license-files = [

0 commit comments

Comments
 (0)