refac(cross): #0 add license info

.envrc.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

.github/workflows/dev.yml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

.github/workflows/prod.yml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

.github/workflows/scorecards-analysis.yaml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

.gitlab-ci.yaml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

.mailmap.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

.reuse/dep5.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

CODE_OF_CONDUCT.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 # Contributor Covenant Code of Conduct
 
 ## Our Pledge

LICENSE.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

LICENSES/MIT.txt.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

README.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 # 🦄 Makes
 
 A software supply chain framework

SECURITY.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 # Security Policy
 
 Just create an issue in the repository with what you've found

default.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {system ? builtins.currentSystem}: let
   args = import ./src/args/agnostic.nix {inherit system;};
   makesVersion = "22.10";

docs/.gitignore.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

docs/book.toml

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 [book]
 authors = ["Fluid Attacks"]
 language = "en"

docs/src/README.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 # 🦄 Makes
 
 A software supply chain framework powered by Nix.

docs/src/SUMMARY.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 - [Introduction](./README.md)
 - [Security](./security/README.md)
   - [SLSA](./security/slsa.md)

docs/src/security/README.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 # Security
 
 This section evaluates Makes using various standards.

docs/src/security/slsa.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 # Supply Chain Levels for Software Artifacts
 
 The [SLSA framework](https://slsa.dev/)

flake.lock.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

flake.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   description = "A DevSecOps framework powered by Nix!";
 

justfile.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   __nixpkgs__,
   fetchNixpkgs,
@@ -47,6 +50,7 @@
       bin = [
         inputs.nixpkgs.just
         inputs.nixpkgs.mdbook
+        inputs.nixpkgs.reuse
       ];
       source = [outputs."/cli/pypi"];
     };

makes/cli/pypi/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {makePythonPypiEnvironment, ...}:
 makePythonPypiEnvironment {
   name = "cli-pypi";

makes/cli/pypi/pypi-deps.yaml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes/cli/pypi/pypi-sources.yaml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes/container-image/builder.sh

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 # shellcheck shell=bash
 
 function configure_nix {

makes/container-image/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   makeContainerImage,
   makeDerivation,

makes/docs/entrypoint.sh

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 # shellcheck shell=bash
 
 mdbook build docs

makes/docs/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   inputs,
   makeScript,

makes/license/entrypoint.sh

@@ -5,7 +5,6 @@
 # shellcheck shell=bash
 
 function main {
-  local success=false
   local license=(
     reuse addheader
     --copyright 'Fluid Attacks and Makes contributors'
@@ -29,7 +28,7 @@ function main {
       --year="$(date +%Y)"
     ) \
     && if reuse lint; then
-      sucess=true
+      return 0
     fi \
     && for extension in "${!languages[@]}"; do
       find . -type f -name "*.${extension}" \

makes/main.nix

@@ -1,2 +1,5 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {projectPath, ...}:
 import (projectPath "/") {}

makes/nested/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   inputs,
   makeSearchPaths,

makes/nested/nested/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {makeScript, ...}:
 makeScript {
   entrypoint = "echo Hello from Makes!";

makes/tests/calculateCvss3/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 # /path/to/my/project/makes/example/main.nix
 {calculateCvss3, ...}:
 calculateCvss3

makes/tests/makeSearchPaths/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {makeDerivation, ...}:
 makeDerivation {
   builder = "touch $out";

makes/tests/makeSearchPaths/template.sh

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 # shellcheck shell=bash
 
 set -x \

makes/tests/makeTemplate/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   fromYaml,
   makeTemplate,

makes/tests/makeTemplate/template.txt.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes/tests/makeTemplate/test.yaml

@@ -14,6 +14,7 @@ testTitle: >-
 
 
 
+
   	‘	’	“	”	•	–	—	˜	™	š	›	œ		ž	Ÿ
    	¡	¢	£	¤	¥	¦	§	¨	©	ª	«	¬	­	®	¯
   °	±	²	³	´	µ	¶	·	¸	¹	º	»	¼	½	¾	¿

makes/tests/makeTemplate/test.yaml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes/tests/scriptWithHelp/README.md

@@ -1,3 +1,9 @@
+<!--
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT
+-->
+
 # A Script With a Help
 
 - This is `makes/tests/scriptWithHelp/README.md`

makes/tests/scriptWithHelp/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {makeScript, ...}:
 makeScript {
   entrypoint = "echo A script with a help, call with --help or -h to see it!";

makes/tests/secretsForGpgFromEnv/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   makeScript,
   outputs,

makes/tests/secretsForGpgFromEnv/pgp.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes/tests/secretsForGpgFromEnv/pgp.pub.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes/tests/secretsForGpgFromEnv/secrets.yaml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT

makes/utils/makeNodeJsLock/entrypoint.sh

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 # shellcheck shell=bash
 
 function main {

makes/utils/makeNodeJsLock/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   __nixpkgs__,
   makeNodeJsVersion,

makes/utils/makePythonLock/entrypoint.sh

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 # shellcheck shell=bash
 
 function main {

makes/utils/makePythonLock/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   __nixpkgs__,
   makePythonVersion,

makes/utils/makePythonLock/update.sh

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 # shellcheck shell=bash
 
 function main {

makes/utils/makeSopsEncryptedFile/entrypoint.sh

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
+
 # shellcheck shell=bash
 
 function main {

makes/utils/makeSopsEncryptedFile/main.nix

@@ -1,3 +1,6 @@
+# SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+#
+# SPDX-License-Identifier: MIT
 {
   __nixpkgs__,
   makeScript,

makes/utils/makeSopsEncryptedFile/template.yaml.license

@@ -0,0 +1,3 @@
+SPDX-FileCopyrightText: 2022 Fluid Attacks and Makes contributors
+
+SPDX-License-Identifier: MIT