Skip to content

fix(compliance): add missing license information for atlas#2718

Merged
migmartri merged 1 commit into
chainloop-dev:mainfrom
kaysavps:missing-licenses-review
Feb 10, 2026
Merged

fix(compliance): add missing license information for atlas#2718
migmartri merged 1 commit into
chainloop-dev:mainfrom
kaysavps:missing-licenses-review

Conversation

@kaysavps

@kaysavps kaysavps commented Feb 9, 2026

Copy link
Copy Markdown
Contributor

A new component atlas appears in the SBOM after updating to atlas v1. This component doesn't include a reported license. After validating that the license is Apache, this PR adds this information to the SBOM.

Fixes #2719

Signed-off-by: Victoria <kaysa.vps@gmail.com>
# Add missing known licenses
# https://github.com/ariga/atlas/blob/master/LICENSE
${{ github.workspace }}/.github/workflows/utils/add-license-to-sbom.sh /tmp/sbom-$material_name.cyclonedx.json "ariga.io/atlas" "Apache-2.0" type="library"
${{ github.workspace }}/.github/workflows/utils/add-license-to-sbom.sh /tmp/sbom-$material_name.cyclonedx.json "ariga.io/atlas/cmd/atlas" "Apache-2.0" type="library"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we remove this one?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No. cmd/atlas still appears as a different component.

@migmartri migmartri merged commit 3713950 into chainloop-dev:main Feb 10, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Missing license information for atlas component

3 participants