Guideline for using SPDX logo in tooling

[sschuberth]

Hi @goneall et al,

could we get some guidance on the license / copyright to use in a REUSE file when adding the SPDX logo to own tooling, like ORT? I find https://spdx.dev/about/legal-notices/ not to be super clear on that, as it does not explicitly refer to logo / media asset use.

Like, when using this SPDX SVG logo, would this be the correct REUSE.toml file entry?

[[annotations]]
path = "logo-color.svg"
SPDX-FileCopyrightText = "2011 The Linux Foundation"
SPDX-License-Identifier = "CC-BY-3.0"