8000 Generated files with code snippets including copyright information causing problems. · Issue #834 · fsfe/reuse-tool · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Generated files with code snippets including copyright information causing problems. #834

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
schmidtw opened this issue Sep 25, 2023 · 4 comments
Labels

Comments

@schmidtw
Copy link

Hello, this is similar to #278 but in my case I have project documentation that includes automatically generated examples that we want copied verbatim and they include the copyright information in SPDX form automatically. Adding the wrappers can be a bit tedious and complex in some cases to maintain effectively & marking the file as excluded by .gitignore is also problematic - we want the file to be easy to update and maintain git.

Since I have the file marked in the dep5 file with the accurate information, it would extremely handy to be able to also tag it in that file as 'do not examine'.

@mxmehl
Copy link
Member
mxmehl commented Sep 26, 2023

I'm not sure I fully understood your case. Does this FAQ item and the following (about ignoring parts of a file) help?

@schmidtw
Copy link
Author

This is a very simple example of a scenario that can cause trouble: https://github.com/xmidt-org/shared-go/#golang-ci-workflow-sample

Effectively we have actions that generate html code that we specifically want to check in & not exclude. In that code, we generate examples that include suggested SPDX headers to help encourage compliance with ease. But needing to add labels to each file that requires this runs into to a few different problems:

  1. For some formats (like JSON) this can be impossible.
  2. For any sizable amount of documentation that is auto generated and committed back as part of a repo, the need to manually restore the tags is tedious and error prone.
  3. Automation of inserting these tags may pose challenges of their own.
  4. From a compliance perspective, I want my org to embrace this workflow to the fullest; but the more tedious work there is, the larger the push-back on the entire effort. Friction yields failure to adopt, unfortunately.

We already have a pretty well though out dep5 file that describes the majority of how a project should be governed. The problem isn't lack of any copyright information in the file, it's simply confusing the tool. Providing a number of ways to handle difficult areas is one of the strengths reuse has. Extending it a bit to make dealing with generated code as easy as dealing with an image is valuable.

I'm aware that I can mark all the files in the .gitignore file, but that dilutes protections it brings because people just get in the habit of adding -f to force everything & then not thinking twice about the likely mistake they're going to make.

@schmidtw
Copy link
Author

This is another example of where it would be ideal to be able to use dep5 to ignore the contents:
https://github.com/xmidt-org/retry/blob/main/NOTICE since we already have an entry https://github.com/xmidt-org/retry/blob/47b368ed0b4df48b9d5586270aca593d52140c5b/.reuse/dep5#L6

(Just documenting use cases of where this is handy.)

Copy link

Thank you for your time and contributions! Unfortunately, this issue has been inactive for quite a while which means we probably can't manage the time to deal with it. That's why we're marking it as stale. We want to keep things tidy and focus on active discussions, but we’re always happy to revisit if this is still relevant!

If you’d like to keep this open, please add a comment to let us know and remove the label stale. Otherwise, this issue will most likely be automatically closed soon.

@github-actions github-actions bot added the stale label May 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants
0