k8sgpt-ai/k8sgpt

[Feature]: Include License, Copyright, and Notice text of third party dependencies in go-releaser build

Opened this issue · 0 comments

Checklist

  • I've searched for similar issues and couldn't find anything matching
  • I've discussed this feature request in the K8sGPT Slack and got positive feedback

Is this feature request related to a problem?

None

Problem Description

No response

Solution Description

Include the third party attribution text in the artifacts output by go-releaser.

The third party attribution text could be compiled to a single text file, and placed in the go-releaser content root, alongside the project license.

Benefits

The inclusion of third party attribution text will be helpful for meeting the distribution requirements of third-party licenses, such as the redistribution clause of the Apache 2.0 License.

As the third party attribution text will be available as text content in distributed artifacts, downstream consumers will have direct access.

Potential Drawbacks

Any third party attribution text will need to be maintained as project dependencies change over time. This incurs an operational burden on the project.

Additional Information

I am more than happy to provide an initial dump of third party attribution text, if the project maintainers are interested in this contribution.