HOIST-IT-Actions/actions
SHA256
Watch
2
0
Fork
You've already forked actions
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(license): relicense to Apache-2.0 #3

Merged
robin.everaars merged 1 commit from chore/relicense-apache-2.0 into main 2026-07-18 09:12:07 +00:00
Conversation 0 Commits 1 Files changed 14 +163 -17
robin.everaars commented 2026-07-18 09:06:35 +00:00
Owner
Copy link

What

Relicenses this repo from the proprietary grant-only licence to Apache-2.0.

These actions are public and consumed cross-org by full-URL
uses: https://forge.hoist-it.nl/HOIST-IT-Actions/actions/<name>@<tag>. Under
the previous LicenseRef-HOISTIT-Proprietary-1.0 (no use without a signed Grant
Document), the repos that pull these actions had no legal right to run them. A
permissive licence is the correct fit for shared CI glue.

Changes

  • Flipped the SPDX header on all first-party content (README, CODEOWNERS,
    CONTRIBUTING, SECURITY, the six */action.yml) from proprietary to Apache-2.0.
  • Swapped LICENSES/: dropped the now-unused proprietary text, added
    Apache-2.0.txt (canonical SPDX text).
  • Added a root LICENSE.md (full Apache-2.0 text) and its REUSE.toml annotation.
  • CODE_OF_CONDUCT.md keeps its CC-BY-SA-4.0 (Contributor Covenant).

Verification

reuse lint clean: 11/11 files with copyright + licence, 0 missing, 0 unused,
used licences = Apache-2.0, CC-BY-SA-4.0.

Note: open PR #2 (build-push-sign-images) adds a new action with a proprietary
header; whichever lands second needs a one-line rebase to Apache-2.0.

## What Relicenses this repo from the proprietary grant-only licence to **Apache-2.0**. These actions are **public** and consumed cross-org by full-URL `uses: https://forge.hoist-it.nl/HOIST-IT-Actions/actions/<name>@<tag>`. Under the previous `LicenseRef-HOISTIT-Proprietary-1.0` (no use without a signed Grant Document), the repos that pull these actions had no legal right to run them. A permissive licence is the correct fit for shared CI glue. ## Changes - Flipped the SPDX header on all first-party content (README, CODEOWNERS, CONTRIBUTING, SECURITY, the six `*/action.yml`) from proprietary to `Apache-2.0`. - Swapped `LICENSES/`: dropped the now-unused proprietary text, added `Apache-2.0.txt` (canonical SPDX text). - Added a root `LICENSE.md` (full Apache-2.0 text) and its REUSE.toml annotation. - `CODE_OF_CONDUCT.md` keeps its `CC-BY-SA-4.0` (Contributor Covenant). ## Verification `reuse lint` clean: 11/11 files with copyright + licence, 0 missing, 0 unused, used licences = Apache-2.0, CC-BY-SA-4.0. Note: open PR #2 (build-push-sign-images) adds a new action with a proprietary header; whichever lands second needs a one-line rebase to Apache-2.0. 
These actions are public and consumed cross-org by full-URL `uses:`, so a
proprietary grant-only licence left the very repos that pull them unable to
use them legally. Relicense all first-party content to Apache-2.0: flip the
SPDX headers, swap the LICENSES/ text, add a root LICENSE.md and update
REUSE.toml. The Contributor Covenant CODE_OF_CONDUCT keeps its CC-BY-SA-4.0.
reuse lint clean (11/11).

Signed-off-by: HOIST IT B.V. <[email protected]>
robin.everaars deleted branch chore/relicense-apache-2.0 2026-07-18 09:12:08 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
dajo.hofman
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
HOIST-IT-Actions/actions!3
No description provided.