Re: Licence scanning

BAGUE Mathieu


I don't know if it's easily feasable, but generated source files should be in the target/generated-classes. If I remember well, we decided to commit it to reduce compilation time. Could it make sense to remove this file from the repo and generate it from the protobuf IDL file in the target directory?


Le mardi 27 avril 2021 à 07:50 -0700, JAMGOTCHIAN Geoffroy via a écrit :
EXPÉDITEUR EXTERNE: Ne cliquez sur aucun lien et n’ouvrez aucune pièce jointe à moins qu’ils ne proviennent d’un expéditeur fiable, ou que vous ayez l'assurance que le contenu provient d'une source sûre.


For powsybl-hpc/computation-mpi/src/main/java/com/powsybl/computation/mpi/generated/Messages this is a generated file so maybe we should configure the scanner to exclude it. It does not make sense (or maybe is illegal?) to add a licence/authorship to a generated file.

For the preventive strategy, I would go for a Maven plugin instead because we can test it locally before pushing the code (same kind of check as checkstyle).
Indeed it will only check Java files but that is 99% of our files (powsybl cpp excluded)


"Ce message est destiné exclusivement aux personnes ou entités auxquelles il est adressé et peut contenir des informations privilégiées ou confidentielles. Si vous avez reçu ce document par erreur, merci de nous l'indiquer par retour, de ne pas le transmettre et de procéder à sa destruction.

This message is solely intended for the use of the individual or entity to which it is addressed and may contain information that is privileged or confidential. If you have received this communication by error, please notify us immediately by electronic mail, do not disclose it and delete the original message."

Join { to automatically receive all group messages.