Fixes copyleft license details

src/main.ts

@@ -29,6 +29,7 @@ import * as outputs from './app.output';
 
 import { scanService, uploadResults } from './services/scan.service';
 import { policyManager } from './policies/policy.manager';
+import { licenseUtil } from './utils/license.utils';
 /**
  * The main function for the action.
  * @returns {Promise<void>} Resolves when the action is complete.

src/policies/copyleft-policy-check.ts

@@ -28,7 +28,7 @@ import { Component, getComponents } from '../services/result.service';
 import { generateTable } from '../utils/markdown.utils';
 import * as core from '@actions/core';
 import { context } from '@actions/github';
-import { getOSADL } from '../utils/license.utils';
+import { licenseUtil } from '../utils/license.utils';
 
 /**
  * This class checks if any of the components identified in the scanner results are subject to copyleft licenses.
@@ -74,7 +74,7 @@ export class CopyleftPolicyCheck extends PolicyCheck {
     // Filter copyleft components
     const componentsWithCopyleft = components.filter(component =>
       component.licenses.some(
-        license => !!license.copyleft || this.copyleftLicenses.has(license.spdxid.trim().toLowerCase())
+        license => !!license.copyleft || licenseUtil.isCopyLeft(license.spdxid.trim().toLowerCase())
       )
     );
 
@@ -107,12 +107,12 @@ export class CopyleftPolicyCheck extends PolicyCheck {
 
     components.forEach(component => {
       component.licenses.forEach(license => {
-        const copyleftIcon = license.copyleft ? ':x:' : ' ';
+        const copyleftIcon = licenseUtil.isCopyLeft(license.spdxid?.trim().toLowerCase()) ? ':x:' : ' ';
         rows.push([
           component.purl,
           component.version,
           license.spdxid,
-          `${getOSADL(license.spdxid) || ''}`,
+          `${licenseUtil.getOSADL(license?.spdxid) || ''}`,
           copyleftIcon
         ]);
       });

src/services/report.service.ts

@@ -27,7 +27,7 @@ import * as core from '@actions/core';
 import { CONCLUSION, PolicyCheck } from '../policies/policy-check';
 import { generateTable } from '../utils/markdown.utils';
 import { context } from '@actions/github';
-import { getOSADL } from '../utils/license.utils';
+import { licenseUtil } from '../utils/license.utils';
 
 export function generatePRSummary(scannerResults: ScannerResults, policies: PolicyCheck[]): string {
   const components = getComponents(scannerResults);
@@ -83,7 +83,7 @@ export async function generateJobSummary(scannerResults: ScannerResults, policie
 
     items.forEach(l => {
       const copyleftIcon = l.copyleft ? ':x:' : ' ';
-      ROWS.push([l.spdxid, copyleftIcon, `${getOSADL(l.spdxid) || ''}`]);
+      ROWS.push([l.spdxid, copyleftIcon, `${licenseUtil.getOSADL(l?.spdxid) || ''}`]);
     });
     return generateTable(HEADERS, ROWS);
   };

src/services/result.service.ts

@@ -22,7 +22,7 @@
  */
 
 import { ComponentID, DependencyComponent, ScannerComponent, ScannerResults } from './result.interfaces';
-import { getOSADL } from '../utils/license.utils';
+import { licenseUtil } from '../utils/license.utils';
 
 //TODO: Move all functions to a class named ResultService that produces an object { licenses: []; compoments: []; dependencies: []; vulns: [];}
 
@@ -58,7 +58,7 @@ export function getComponents(results: ScannerResults): Component[] {
           version: (c as ScannerComponent).version,
           licenses: (c as ScannerComponent).licenses.map(l => ({
             spdxid: l.name,
-            copyleft: !l.copyleft ? null : l.copyleft === 'yes' ? true : false,
+            copyleft: licenseUtil.isCopyLeft(l.name?.trim().toLowerCase()),
             url: l?.url ? l.url : null,
             count: 1
           }))
@@ -72,7 +72,12 @@ export function getComponents(results: ScannerResults): Component[] {
             purl: d.purl,
             version: d.version,
             licenses: d.licenses
-              .map(l => ({ spdxid: l.spdx_id, copyleft: null, url: null, count: 1 }))
+              .map(l => ({
+                spdxid: l.spdx_id,
+                copyleft: licenseUtil.isCopyLeft(l.spdx_id?.trim().toLowerCase()),
+                url: null,
+                count: 1
+              }))
               .filter(l => l.spdxid)
           });
         }
@@ -123,8 +128,8 @@ export function getLicenses(results: ScannerResults): License[] {
         for (const l of (c as ScannerComponent).licenses) {
           licenses.push({
             spdxid: l.name,
-            copyleft: !l.copyleft ? null : l.copyleft === 'yes' ? true : false,
-            url: getOSADL(l.name),
+            copyleft: licenseUtil.isCopyLeft(l.name.trim().toLowerCase()),
+            url: licenseUtil.getOSADL(l?.name),
             count: 1
           });
         }
@@ -135,7 +140,12 @@ export function getLicenses(results: ScannerResults): License[] {
         for (const d of dependencies) {
           for (const l of d.licenses) {
             if (!l.spdx_id) continue;
-            licenses.push({ spdxid: l.spdx_id, copyleft: null, url: getOSADL(l.spdx_id), count: 1 });
+            licenses.push({
+              spdxid: l.spdx_id,
+              copyleft: licenseUtil.isCopyLeft(l.spdx_id?.trim().toLowerCase()),
+              url: licenseUtil.getOSADL(l?.spdx_id),
+              count: 1
+            });
           }
         }
       }

src/utils/license.utils.ts

@@ -1,3 +1,48 @@
-export const getOSADL = (spdxid: string): string => {
-  return `https://spdx.org/licenses/${spdxid}.html`;
-};
+export class LicenseUtil {
+  private BASE_OSADL_URL = 'https://spdx.org/licenses';
+  private HTML = 'html';
+  constructor() {
+    this.init();
+  }
+
+  private defaultCopyleftLicenses = new Set<string>(
+    [
+      'GPL-1.0-only',
+      'GPL-2.0-only',
+      'GPL-3.0-only',
+      'AGPL-3.0-only',
+      'Sleepycat',
+      'Watcom-1.0',
+      'GFDL-1.1-only',
+      'GFDL-1.2-only',
+      'GFDL-1.3-only',
+      'LGPL-2.1-only',
+      'LGPL-3.0-only',
+      'MPL-1.1',
+      'MPL-2.0',
+      'EPL-1.0',
+      'EPL-2.0',
+      'CDDL-1.0',
+      'CDDL-1.1',
+      'CECILL-2.1',
+      'Artistic-1.0',
+      'Artistic-2.0',
+      'CC-BY-SA-4.0'
+    ].map(l => l.toLowerCase())
+  );
+
+  private copyLeftLicenses = new Set<string>();
+
+  private init(): void {
+    this.copyLeftLicenses = this.defaultCopyleftLicenses;
+  }
+
+  isCopyLeft(spdxid: string): boolean {
+    return this.copyLeftLicenses.has(spdxid);
+  }
+
+  getOSADL(spdxid: string): string {
+    return `${this.BASE_OSADL_URL}/${spdxid}/.${this.HTML}`;
+  }
+}
+export const licenseUtil = new LicenseUtil();