secureCodeBox · o1oo11oo · Oct 4, 2023 · Oct 4, 2023 · Oct 4, 2023 · Oct 4, 2023
diff --git a/.github/workflows/license-check.yaml b/.github/workflows/license-check.yaml
@@ -0,0 +1,24 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
+name: Check License Compliance
+on:
+  push:
+    branches:
+      - main
+      - v[0-9]+.x
+  pull_request:
+
+jobs:
+  license-check:
+    runs-on: ubuntu-22.04
+    if: github.repository == 'secureCodeBox/secureCodeBox'
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: REUSE Compliance Check
+        uses: fsfe/reuse-action@v2
+        with:
+          args: --include-submodules lint
diff --git a/.reuse/dep5 b/.reuse/dep5
@@ -1,8 +1,15 @@
 Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: secureCodeBox
-Upstream-Contact: Robert Seedorff <robert.seedorff@iteratec.com>
+Upstream-Contact: Robert Felber <robert.felber@iteratec.com>
 Source: https://github.com/secureCodeBox/secureCodeBox
 
 Files: .github/ISSUE_TEMPLATE/*.md
 Copyright: the secureCodeBox authors
 License: Apache-2.0
+
+# Workaround because some of the test files hav content which confuses reuse
+# and it will skip the file resulting in no copyright/license ifo which will
+# fail our check.
+Files: **/tests/__snapshot__/*.yaml.snap
+Copyright: the secureCodeBox authors
+License: Apache-2.0
diff --git a/auto-discovery/kubernetes/tests/auto-discovery_test.yaml b/auto-discovery/kubernetes/tests/auto-discovery_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 templates:
   - rbac/*.yaml

diff --git a/demo-targets/bodgeit/tests/bodgeit_test.yaml b/demo-targets/bodgeit/tests/bodgeit_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/dummy-ssh/tests/dummy-ssh_test.yaml b/demo-targets/dummy-ssh/tests/dummy-ssh_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/http-webhook/tests/http-webhook_test.yaml b/demo-targets/http-webhook/tests/http-webhook_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/juice-shop/tests/juice-shop_test.yaml b/demo-targets/juice-shop/tests/juice-shop_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/old-joomla/tests/old-joomla_test.yaml b/demo-targets/old-joomla/tests/old-joomla_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/old-typo3/tests/old-typo3_test.yaml b/demo-targets/old-typo3/tests/old-typo3_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/old-wordpress/tests/old-wordpress_test.yaml b/demo-targets/old-wordpress/tests/old-wordpress_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/swagger-petstore/tests/swagger-petstore_test.yaml b/demo-targets/swagger-petstore/tests/swagger-petstore_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/unsafe-https/tests/unsafe-https_test.yaml b/demo-targets/unsafe-https/tests/unsafe-https_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/demo-targets/vulnerable-log4j/tests/vulnerable-log4j_test.yaml b/demo-targets/vulnerable-log4j/tests/vulnerable-log4j_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/hooks/cascading-scans/tests/cascading-scans_test.yaml b/hooks/cascading-scans/tests/cascading-scans_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/hooks/finding-post-processing/tests/finding-post-processing_test.yaml b/hooks/finding-post-processing/tests/finding-post-processing_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 tests:
   - it: matches the snapshot

diff --git a/hooks/generic-webhook/tests/generic-webhook_test.yaml b/hooks/generic-webhook/tests/generic-webhook_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/hooks/notification/tests/notification_test.yaml b/hooks/notification/tests/notification_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/hooks/persistence-azure-monitor/tests/persistence-azure-monitor_test.yaml b/hooks/persistence-azure-monitor/tests/persistence-azure-monitor_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/hooks/persistence-defectdojo/tests/persistence-defectdojo_test.yaml b/hooks/persistence-defectdojo/tests/persistence-defectdojo_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/hooks/persistence-elastic/tests/persistence-elastic_test.yaml b/hooks/persistence-elastic/tests/persistence-elastic_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 templates:
   - import-dashboard.yaml

diff --git a/hooks/update-field-hook/tests/update-field-hook_test.yaml b/hooks/update-field-hook/tests/update-field-hook_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/operator/tests/operator_test.yaml b/operator/tests/operator_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 templates:
   - NOTES.txt

diff --git a/scanners/amass/tests/scanner_test.yaml b/scanners/amass/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/cmseek/tests/scanner_test.yaml b/scanners/cmseek/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/doggo/tests/scanner_test.yaml b/scanners/doggo/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/ffuf/tests/scanner_test.yaml b/scanners/ffuf/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/git-repo-scanner/tests/scanner_test.yaml b/scanners/git-repo-scanner/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/gitleaks/tests/scanner_test.yaml b/scanners/gitleaks/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/kube-hunter/tests/scanner_test.yaml b/scanners/kube-hunter/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/kubeaudit/tests/scanner_test.yaml b/scanners/kubeaudit/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/ncrack/tests/scanner_test.yaml b/scanners/ncrack/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/nikto/tests/scanner_test.yaml b/scanners/nikto/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/nmap/tests/scanner_test.yaml b/scanners/nmap/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/nuclei/tests/scanner_test.yaml b/scanners/nuclei/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/screenshooter/tests/scanner_test.yaml b/scanners/screenshooter/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/semgrep/tests/scanner_test.yaml b/scanners/semgrep/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/ssh-audit/tests/scanner_test.yaml b/scanners/ssh-audit/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/ssh-scan/tests/scanner_test.yaml b/scanners/ssh-scan/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/sslyze/tests/scanner_test.yaml b/scanners/sslyze/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/test-scan/tests/scanner_test.yaml b/scanners/test-scan/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/trivy/tests/scanner_test.yaml b/scanners/trivy/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/typo3scan/tests/scanner_test.yaml b/scanners/typo3scan/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/whatweb/tests/scanner_test.yaml b/scanners/whatweb/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/wpscan/tests/scanner_test.yaml b/scanners/wpscan/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/zap-advanced/tests/scanner_test.yaml b/scanners/zap-advanced/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests:

diff --git a/scanners/zap/tests/scanner_test.yaml b/scanners/zap/tests/scanner_test.yaml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: the secureCodeBox authors
+#
+# SPDX-License-Identifier: Apache-2.0
+
 suite: Full Snapshot
 
 tests: