Google Git
Sign in
pigweed / third_party / github / bazelbuild / rules_license / refs/heads/upstream/main
commit3143f521ecaf0b80edf1f1f319c3256bcdae3c9d[log] [tgz]
authorTony Aiuto <tony.aiuto@datadoghq.com>Thu Jul 10 10:51:56 2025 -0400
committerGitHub <noreply@github.com>Thu Jul 10 10:51:56 2025 -0400
tree6eaac0dc5ecdc9f9120c51c723abe2552f1d00bc
parent04f3f971e16189cc822d735f72a87b0a80651eed [diff]
parent677149517c5b56dcccefe6dced03273f1c991b63 [diff]
Merge pull request #172 from aiuto/doc

Update doc to point to bazel-contrib/supply-chain
tree: 6eaac0dc5ecdc9f9120c51c723abe2552f1d00bc
  1. .bazelci/
  2. .github/
  3. admin/
  4. distro/
  5. doc_build/
  6. docs/
  7. examples/
  8. licenses/
  9. rules/
  10. rules_gathering/
  11. sample_reports/
  12. tests/
  13. tools/
  14. .gitignore
  15. BUILD
  16. CODEOWNERS
  17. deps.bzl
  18. LICENSE
  19. MODULE.bazel
  20. README.md
  21. version.bzl
  22. WORKSPACE
  23. WORKSPACE.bzlmod
README.md

rules_license

CI: Build status

:warning: WARNING
Active development has moved to https://github.com/bazel-contrib/supply-chain. Please look there for current status. If you wish to contribute, please consider doing your work there.

This repository contains a set of rules and tools for

  • declaring metadata about packages, such as
    • the licenses the package is available under
    • the canonical package name and version
    • copyright information
    • ... and more TBD in the future
  • gathering license declarations into artifacts to ship with code
  • applying organization specific compliance constraints against the set of packages used by a target.
  • producing SBOMs for built artifacts.

Background reading:

These is for learning about the problem space, and our approach to solutions. Concrete specifications will always appear in checked in code rather than documents.