Updating the license from Apache 2.0 to MPL 2.0 (#47)

.copywrite.hcl

@@ -0,0 +1,17 @@
+schema_version = 1
+
+project {
+  license          = "MPL-2.0"
+  copyright_holder = "Mondoo, Inc."
+  copyright_year   = 2023
+
+  # (OPTIONAL) A list of globs that should not have copyright/license headers.
+  # Supports doublestar glob patterns for more flexibility in defining which
+  # files or folders should be ignored
+  header_ignore = [
+    "**/*.tf",
+    "**/testdata/**",
+    "**/*.pb.go",
+    "**/*_string.go",
+  ]
+}

.github/workflows/cla.yaml

@@ -1,9 +1,9 @@
-name: "CLA Assistant"
+name: "CLA Assistant & License Check"
 on:
   issue_comment:
     types: [created]
   pull_request_target:
-    types: [opened,closed,synchronize]
+    types: [opened, closed, synchronize]
 
 jobs:
   CLAssistant:
@@ -14,13 +14,25 @@ jobs:
         uses: contributor-assistant/[email protected]
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_ACCESS_TOKEN }}
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_ACCESS_TOKEN }}
         with:
-          path-to-signatures: 'signatures/version1/cla.json'
-          path-to-document: 'https://github.com/mondoohq/.github/blob/master/CLA.md'
-          custom-pr-sign-comment: 'I have read the Mondoo CLA Document and I hereby sign the CLA'
-          custom-notsigned-prcomment: 'Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text.'
+          path-to-signatures: "signatures/version1/cla.json"
+          path-to-document: "https://github.com/mondoohq/.github/blob/master/CLA.md"
+          custom-pr-sign-comment: "I have read the Mondoo CLA Document and I hereby sign the CLA"
+          custom-notsigned-prcomment: "Thank you for your submission, we really appreciate it. Before we can accept your contribution, we ask that you sign the [Mondoo Contributor License Agreement](https://github.com/mondoohq/.github/blob/master/CLA.md). You can sign the CLA by adding a new comment to this pull request and pasting exactly the following text."
           remote-repository-name: cla
           remote-organization-name: mondoohq
-          branch: 'main'
+          branch: "main"
           allowlist: mondoo-tools,github-actions[bot],dependabot[bot]
+
+  license-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Copywrite
+        uses: hashicorp/[email protected]
+
+      - name: Check Header Compliance
+        run: copywrite headers --plan

.goreleaser.yml

@@ -1,3 +1,6 @@
+# Copyright (c) Mondoo, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 ---
 env:
   - CGO_ENABLED=0