Skip to content

chore: add CycloneDX SPDX license metadata and polish doc/test comments - #29

Merged
grobf5 merged 1 commit into
mainfrom
chore/ospo-scanner-readiness
Oct 21, 2026
Merged

grobf5 merged 1 commit into
mainfrom
chore/ospo-scanner-readiness

Conversation

@grobf5

@grobf5 grobf5 commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add SPDX license identifiers (Apache-2.0 for myf5-cli and BSD-3-Clause for golang.org/x/* dependencies) to scripts/gen-sbom.sh so automated OSPO SBOM scanners (FOSSA / Black Duck / Dependency-Track) see 100% component license attribution.
  • Replace post-push tmsh install sys software examples in docs/appliance_push.md with image verification (tmsh list sys software image/hotfix) and an explicit scope note.
  • Polish test and fallback comments in pkg/downloads/client.go, pkg/cases/client_test.go, and pkg/auth/oauth_test.go.

@grobf5
grobf5 merged commit a36595e into main Oct 21, 2026
12 checks passed
@grobf5
grobf5 deleted the chore/ospo-scanner-readiness branch October 21, 2026 17:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant