diff --git a/.copywrite.hcl b/.copywrite.hcl new file mode 100644 index 0000000..ed2142c --- /dev/null +++ b/.copywrite.hcl @@ -0,0 +1,17 @@ +schema_version = 1 + +project { + license = "BUSL-1.1" + copyright_holder = "Mondoo, Inc." + copyright_year = 2023 + + # (OPTIONAL) A list of globs that should not have copyright/license headers. + # Supports doublestar glob patterns for more flexibility in defining which + # files or folders should be ignored + header_ignore = [ + "**/*.tf", + "**/testdata/**", + "**/*.pb.go", + "**/*_string.go", + ] +} \ No newline at end of file diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 253bcb7..e8bdd99 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,3 +1,4 @@ +--- version: 2 updates: - package-ecosystem: github-actions diff --git a/.github/workflows/ansible-ci.yml b/.github/workflows/ansible-ci.yml index 327d276..de8a0a3 100644 --- a/.github/workflows/ansible-ci.yml +++ b/.github/workflows/ansible-ci.yml @@ -10,12 +10,12 @@ jobs: strategy: matrix: config: - - image: geerlingguy/docker-ubuntu2204-ansible - tag: latest - - image: geerlingguy/docker-rockylinux9-ansible - tag: latest - - image: rsprta/opensuse-ansible - tag: latest + - image: geerlingguy/docker-ubuntu2204-ansible + tag: latest + - image: geerlingguy/docker-rockylinux9-ansible + tag: latest + - image: rsprta/opensuse-ansible + tag: latest steps: - name: checkout uses: actions/checkout@v3 @@ -27,4 +27,4 @@ jobs: options: parallel scenario: default image: ${{ matrix.config.image }} - tag: ${{ matrix.config.tag }} \ No newline at end of file + tag: ${{ matrix.config.tag }} diff --git a/.github/workflows/ansible-lint.yml b/.github/workflows/ansible-lint.yml index b5f8e62..8c21500 100644 --- a/.github/workflows/ansible-lint.yml +++ b/.github/workflows/ansible-lint.yml @@ -1,3 +1,4 @@ +--- name: Ansible Lint on: [push] @@ -8,4 +9,4 @@ jobs: steps: - uses: actions/checkout@v3 - name: Run ansible-lint - uses: ansible-community/ansible-lint-action@main \ No newline at end of file + uses: ansible-community/ansible-lint-action@main diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml index 4092ad4..7670e0f 100644 --- a/.github/workflows/cla.yaml +++ b/.github/workflows/cla.yaml @@ -1,9 +1,10 @@ -name: "CLA Assistant" +--- +name: "CLA Assistant & License Check" on: issue_comment: types: [created] pull_request_target: - types: [opened,closed,synchronize] + types: [opened, closed, synchronize] jobs: CLAssistant: @@ -14,13 +15,25 @@ jobs: uses: contributor-assistant/github-action@v2.3.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_ACCESS_TOKEN }} + PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ACCESS_TOKEN }} with: - path-to-signatures: 'signatures/version1/cla.json' - path-to-document: 'https://github.com/mondoohq/.github/blob/master/CLA.md' - custom-pr-sign-comment: 'I have read the Mondoo CLA Document and I hereby sign the CLA' - custom-notsigned-prcomment: 'Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text.' + path-to-signatures: "signatures/version1/cla.json" + path-to-document: "https://github.com/mondoohq/.github/blob/master/CLA.md" + custom-pr-sign-comment: "I have read the Mondoo CLA Document and I hereby sign the CLA" + custom-notsigned-prcomment: "Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text." remote-repository-name: cla remote-organization-name: mondoohq - branch: 'main' + branch: "main" allowlist: mondoo-tools,github-actions[bot],dependabot[bot] + + license-check: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Setup Copywrite + uses: hashicorp/setup-copywrite@v1.1.2 + + - name: Check Header Compliance + run: copywrite headers --plan diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1de9e13..8e77af6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,4 +16,4 @@ jobs: - name: galaxy uses: robertdebock/galaxy-action@1.2.1 with: - galaxy_api_key: ${{ secrets.GALAXY_API_KEY }} \ No newline at end of file + galaxy_api_key: ${{ secrets.GALAXY_API_KEY }} diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..ae1fab3 --- /dev/null +++ b/LICENSE @@ -0,0 +1,41 @@ +License text copyright (c) 2020 MariaDB Corporation Ab, All Rights Reserved. +“Business Source License” is a trademark of MariaDB Corporation Ab. + +Parameters + +Licensor: Mondoo, Inc. (“Mondoo”) +Licensed Work(s): ansible role version 2.2.0 and + later. The Licensed Work is (c) 2023 Mondoo, Inc. +Additional Use Grant: You may use, distribute or host the Licensed Work in + your own or your direct customers’ production + environment, provided that such use, distribution or + hosting does not include offering the Licensed Work to + third parties as part of or in connection with an + offering that is competitive with any of Mondoo’s + products. +Change Date: Four years from the date the Licensed Work is published +Change License: MPL 2.0 + +For information about alternative licensing arrangements for the Licensed Work, please contact licensing@mondoo.com. + +Notice + +Business Source License 1.1 + +Terms + +The Licensor hereby grants you the right to copy, modify, create derivative works, redistribute, and make non-production use of the Licensed Work. The Licensor may make an Additional Use Grant, above, permitting limited production use. + +Effective on the Change Date, or the fourth anniversary of the first publicly available distribution of a specific version of the Licensed Work under this License, whichever comes first, the Licensor hereby grants you rights under the terms of the Change License, and the rights granted in the paragraph above terminate. + +If your use of the Licensed Work does not comply with the requirements currently in effect as described in this License, you must purchase a commercial license from the Licensor, its affiliated entities, or authorized resellers, or you must refrain from using the Licensed Work. + +All copies of the original and modified Licensed Work, and derivative works of the Licensed Work, are subject to this License. This License applies separately for each version of the Licensed Work and the Change Date may vary for each version of the Licensed Work released by Licensor. + +You must conspicuously display this License on each original or modified copy of the Licensed Work. If you receive the Licensed Work in original or modified form from a third party, the terms and conditions set forth in this License apply to your use of that work. + +Any use of the Licensed Work in violation of this License will automatically terminate your rights under this License for the current and all other versions of the Licensed Work. + +This License does not grant you any right in any trademark or logo of Licensor or its affiliates (provided that you may use a trademark or logo of Licensor as expressly required by this License). + +TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS, EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND TITLE. diff --git a/Makefile b/Makefile new file mode 100644 index 0000000..ea574f6 --- /dev/null +++ b/Makefile @@ -0,0 +1,8 @@ +# Copywrite Check Tool: https://github.com/hashicorp/copywrite +license: license/headers/check + +license/headers/check: + copywrite headers --plan + +license/headers/apply: + copywrite headers \ No newline at end of file diff --git a/defaults/main.yml b/defaults/main.yml index 4083eed..f95575d 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- # defaults file for mondoo diff --git a/handlers/main.yml b/handlers/main.yml index ddf89c4..795b634 100644 --- a/handlers/main.yml +++ b/handlers/main.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- # handlers file for cnspec service diff --git a/meta/main.yml b/meta/main.yml index 9736733..57280fa 100644 --- a/meta/main.yml +++ b/meta/main.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- collections: - ansible.windows @@ -14,7 +17,7 @@ galaxy_info: # next line and provide a value # issue_tracker_url: http://example.com/issue/tracker - license: Apache-2.0 + license: BUSL-1.1 min_ansible_version: '1.2' diff --git a/molecule/default/converge.yml b/molecule/default/converge.yml index 5379803..6ba6fef 100644 --- a/molecule/default/converge.yml +++ b/molecule/default/converge.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- - name: Converge hosts: all diff --git a/molecule/default/molecule.yml b/molecule/default/molecule.yml index 74d5a5f..824eabe 100644 --- a/molecule/default/molecule.yml +++ b/molecule/default/molecule.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- dependency: name: galaxy diff --git a/molecule/default/tests/mondoo-installer.mql.yaml b/molecule/default/tests/mondoo-installer.mql.yaml index 1da2fbb..e3790af 100644 --- a/molecule/default/tests/mondoo-installer.mql.yaml +++ b/molecule/default/tests/mondoo-installer.mql.yaml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + # Read more about the policy structure at https://mondoo.com/docs/platform/policies/overview policies: - uid: mondoo-installer diff --git a/molecule/default/verify.yml b/molecule/default/verify.yml index 5305622..624cac3 100644 --- a/molecule/default/verify.yml +++ b/molecule/default/verify.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- - name: Verify hosts: all diff --git a/requirements.yml b/requirements.yml index 11e3224..880eb5e 100644 --- a/requirements.yml +++ b/requirements.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- roles: - name: robertdebock.bootstrap diff --git a/tasks/linux.yml b/tasks/linux.yml index 732eb8a..dcf7790 100644 --- a/tasks/linux.yml +++ b/tasks/linux.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- # install mondoo package which installs cnquery and cnspec diff --git a/tasks/linux_login.yml b/tasks/linux_login.yml index 6bfb91f..9692c54 100644 --- a/tasks/linux_login.yml +++ b/tasks/linux_login.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- - name: Create mondoo config directory diff --git a/tasks/main.yml b/tasks/main.yml index 920cd1d..b318b72 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- - name: Linux diff --git a/tasks/pkg_debian.yml b/tasks/pkg_debian.yml index 8ea9b96..a1f0b05 100644 --- a/tasks/pkg_debian.yml +++ b/tasks/pkg_debian.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- - name: Add Mondoo apt repository key. diff --git a/tasks/pkg_rhel.yml b/tasks/pkg_rhel.yml index bfd5221..daa445c 100644 --- a/tasks/pkg_rhel.yml +++ b/tasks/pkg_rhel.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- - name: Install Mondoo rpm repository diff --git a/tasks/pkg_suse.yml b/tasks/pkg_suse.yml index f563f0a..f9857b1 100644 --- a/tasks/pkg_suse.yml +++ b/tasks/pkg_suse.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- # workaround since zypper_repository does not support gpgkey value diff --git a/tasks/windows.yml b/tasks/windows.yml index 1a40ef7..33f330f 100644 --- a/tasks/windows.yml +++ b/tasks/windows.yml @@ -1,3 +1,6 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- # download the latest json to fetch the latest released version diff --git a/vars/main.yml b/vars/main.yml index f6657c2..1bb5ad5 100644 --- a/vars/main.yml +++ b/vars/main.yml @@ -1,2 +1,5 @@ +# Copyright (c) Mondoo, Inc. +# SPDX-License-Identifier: BUSL-1.1 + --- # vars file for mondoo