zephyrproject-rtos / action_scancode Goto Github PK

Add something in the README to https://github.com/zephyrproject-rtos/docker_scancode so we know they are linked

Scancode may report, in the JSON output, unknown-license-reference as one of the detected licenses if a source file contains a line with the word "license," in which case the license_check.py scripts detects this as an invalid license of the type unknown-license-reference.

For example, the following failure is reported for https://github.com/zephyrproject-rtos/hal_atmel/blob/a87f83a404a625b98fca42a0781b34a27a71a5c1/asf/sam0/include/same_fake/component/ac.h#L14:

* scan/asf/sam0/include/same_fake/component/ac.h is not bsd-x11 licensed: unknown-license-reference
* scan/asf/sam0/include/same_fake/component/ac.h has non-permissive license: unknown-license-reference

The license_check.py script needs to be updated to ignore the reported license type of unknown-license-reference so that such misdetections are not flagged as licensing issues.

Note that unknown-license-reference is different from finding an unknown license type (unknown-spdx) or entirely missing a license header (licenses is empty).