Skip to content
GitLab
Next
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • GitLab GitLab
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 44,763
    • Issues 44,763
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 1,329
    • Merge requests 1,329
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Container Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GitLab.orgGitLab.org
  • GitLabGitLab
  • Issues
  • #5483
Closed
Open
Issue created Mar 28, 2018 by Fabio Busatto@bikebillyContributor

Add license management to Auto DevOps template

Description

License Management will help developers to know which licenses they are using because of the dependencies of their project. In this way they can check if they are using incompatible licenses.

We should provide a way to auto detect the licenses used, and to list them to users.

Proposal

Integrate LicenseFinder (https://github.com/pivotal/LicenseFinder) in Auto DevOps to provide automatic license detection for dependencies.

It supports the following languages/packagemanagers:

Project Type Package Manager
Ruby Gems bundler
Python Eggs pip
Node.js npm
Bower bower
Nuget nuget
Godep Godep
Go workspace Go lang
Go submodules Go lang
Java maven
Java gradle

The output of the report should be saved as an artifact, so it can be consumed easily.

Assignee
Assign to
Time tracking