mondoohq · benr · Sep 20, 2023 · Sep 20, 2023
diff --git a/.copywrite.hcl b/.copywrite.hcl
@@ -0,0 +1,17 @@
+schema_version = 1
+
+project {
+  license          = "BUSL-1.1"
+  copyright_holder = "Mondoo, Inc."
+  copyright_year   = 2023
+
+  # (OPTIONAL) A list of globs that should not have copyright/license headers.
+  # Supports doublestar glob patterns for more flexibility in defining which
+  # files or folders should be ignored
+  header_ignore = [
+    "**/*.tf",
+    "**/testdata/**",
+    "**/*.pb.go",
+    "**/*_string.go",
+  ]
+}
diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml
@@ -1,9 +1,9 @@
-name: "CLA Assistant"
+name: "CLA Assistant & License Check"
 on:
   issue_comment:
     types: [created]
   pull_request_target:
-    types: [opened,closed,synchronize]
+    types: [opened, closed, synchronize]
 
 jobs:
   CLAssistant:
@@ -14,13 +14,25 @@ jobs:
         uses: contributor-assistant/[email protected]
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_ACCESS_TOKEN }}
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ACCESS_TOKEN }}
         with:
-          path-to-signatures: 'signatures/version1/cla.json'
-          path-to-document: 'https://github.com/mondoohq/.github/blob/master/CLA.md'
-          custom-pr-sign-comment: 'I have read the Mondoo CLA Document and I hereby sign the CLA'
-          custom-notsigned-prcomment: 'Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text.'
+          path-to-signatures: "signatures/version1/cla.json"
+          path-to-document: "https://github.com/mondoohq/.github/blob/master/CLA.md"
+          custom-pr-sign-comment: "I have read the Mondoo CLA Document and I hereby sign the CLA"
+          custom-notsigned-prcomment: "Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text."
           remote-repository-name: cla
           remote-organization-name: mondoohq
-          branch: 'main'
+          branch: "main"
           allowlist: mondoo-tools,github-actions[bot],dependabot[bot]
+
+  license-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Copywrite
+        uses: hashicorp/[email protected]
+
+      - name: Check Header Compliance
+        run: copywrite headers --plan
diff --git a/LICENSE b/LICENSE
diff --git a/Makefile b/Makefile
@@ -0,0 +1,8 @@
+# Copywrite Check Tool: https://github.com/hashicorp/copywrite
+license: license/headers/check
+
+license/headers/check:
+	copywrite headers --plan
+
+license/headers/apply:
+	copywrite headers
diff --git a/README.md b/README.md
@@ -12,4 +12,4 @@ Join the [Mondoo Community GitHub Discussions](https://github.com/orgs/mondoohq/
 
 ## License
 
-[Mozilla Public License v2.0](https://github.com/mondoohq/mondoo-operator/blob/main/LICENSE)
+[Business Source License 1.1](LICENSE)
diff --git a/core/mondoo-aws-incident-response.mql.yaml b/core/mondoo-aws-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-incident-response-aws
     name: AWS Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-aws-inventory.mql.yaml b/core/mondoo-aws-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-asset-inventory-aws
     name: AWS Asset Inventory Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-azure-inventory.mql.yaml b/core/mondoo-azure-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-asset-inventory-azure
     name: Azure Asset Inventory Pack
-    version: 1.1.0
+    version: 1.2.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-gcp-inventory.mql.yaml b/core/mondoo-gcp-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-asset-inventory-gcp
     name: GCP Asset Inventory Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-github-incident-response.mql.yaml b/core/mondoo-github-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-incident-response-github-org
     name: GitHub Organization Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-github-inventory.mql.yaml b/core/mondoo-github-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-github-inventory-org
     name: GitHub Organization Inventory Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-kubernetes-incident-response.mql.yaml b/core/mondoo-kubernetes-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-kubernetes-incident-response
     name: Kubernetes Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-kubernetes-inventory.mql.yaml b/core/mondoo-kubernetes-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-kubernetes-inventory
     name: Kubernetes Inventory Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-linux-incident-response.mql.yaml b/core/mondoo-linux-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-linux-incident-response
     name: Linux Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-linux-inventory.mql.yaml b/core/mondoo-linux-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-linux-inventory
     name: Linux Inventory Pack
-    version: 1.2.0
+    version: 1.3.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-macos-incident-response.mql.yaml b/core/mondoo-macos-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-macos-incident-response
     name: macOS Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-macos-inventory.mql.yaml b/core/mondoo-macos-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-macos-inventory
     name: macOS Inventory Pack
-    version: 1.1.0
+    version: 1.2.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-openssl-incident-response.mql.yaml b/core/mondoo-openssl-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-openssl-incident-response
     name: OpenSSL Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-ssl-tls-certificate-incident-response.mql.yaml b/core/mondoo-ssl-tls-certificate-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-ssl-tls-certificate-incident-response
     name: SSL/TLS Certificate Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-vmware-incident-response.mql.yaml b/core/mondoo-vmware-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-vmware-incident-response
     name: VMware vCenter Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-windows-incident-response.mql.yaml b/core/mondoo-windows-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-windows-incident-response
     name: Windows Incident Response Pack
-    version: 1.1.1
+    version: 1.2.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/core/mondoo-windows-inventory.mql.yaml b/core/mondoo-windows-inventory.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-windows-asset-inventory
     name: Windows Asset Inventory Pack
-    version: 1.1.1
+    version: 1.2.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/extra/mondoo-asset-count.mql.yaml b/extra/mondoo-asset-count.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-asset-count
     name: Asset Count Query Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     groups:
       - title: ESXi asset counts
         filters: asset.platform == 'vmware-vsphere'

diff --git a/extra/mondoo-googleworkplace-incident-response.mql.yaml b/extra/mondoo-googleworkplace-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-googleworkspace-incident-response
     name: Google Workspace Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/extra/mondoo-okta-incident-response.mql.yaml b/extra/mondoo-okta-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-okta-incident-response
     name: Okta Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]

diff --git a/extra/mondoo-slack-incident-response.mql.yaml b/extra/mondoo-slack-incident-response.mql.yaml
@@ -1,7 +1,11 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: BUSL-1.1
+
 packs:
   - uid: mondoo-slack-incident-response
     name: Slack Incident Response Pack
-    version: 1.0.0
+    version: 1.1.0
+    license: BUSL-1.1
     authors:
       - name: Mondoo, Inc
         email: [email protected]