From d878523d7e4709b9fcc860fd4a80ab73829ffd56 Mon Sep 17 00:00:00 2001 From: Trent Mick Date: Thu, 16 Jan 2025 08:11:41 -0800 Subject: [PATCH] Refer to CNCF allowlist for 3rd-party licenses approved for inclusion in CNCF repos (#2506) * Refer to CNCF allowlist for 3rd-party licenses approved for inclusion in CNCF repos This came up in https://github.com/open-telemetry/opentelemetry-js/pull/5305 Refs: https://github.com/open-telemetry/community/issues/2504 * mention and refer to the CNCF conditions for including third-party code --- guides/contributor/processes.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/guides/contributor/processes.md b/guides/contributor/processes.md index 5f191cbca..92d30217c 100644 --- a/guides/contributor/processes.md +++ b/guides/contributor/processes.md @@ -207,8 +207,9 @@ you will need to [retain the original copyright notice](https://github.com/cncf/ Any contributed third-party code must originally be Apache 2.0-Licensed or must carry a permissive software license that is compatible when combining with -Apache 2.0 License. At this moment, BSD and MIT are the only -[OSI-approved licenses](https://opensource.org/licenses/alphabetical) known to be compatible. +Apache 2.0 License. The [CNCF Allowlist License Policy](https://github.com/cncf/foundation/blob/main/allowed-third-party-license-policy.md#cncf-allowlist-license-policy) +describes the requirements for including third-party code in CNCF codebases, +along with a list of approved compatible licenses. If you make substantial changes to the third-party code, _prepend_ the contributed third party file with OpenTelemetry's copyright notice.