From e3a655284bf13a07ffa909aefcdff58da53066d0 Mon Sep 17 00:00:00 2001 From: Trent Mick Date: Fri, 10 Jan 2025 10:55:24 -0800 Subject: [PATCH] Refer to CNCF allowlist for 3rd-party licenses approved for inclusion in CNCF repos This came up in https://github.com/open-telemetry/opentelemetry-js/pull/5305 Refs: https://github.com/open-telemetry/community/issues/2504 --- guides/contributor/processes.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/guides/contributor/processes.md b/guides/contributor/processes.md index 5f191cbca..3a1e653d7 100644 --- a/guides/contributor/processes.md +++ b/guides/contributor/processes.md @@ -207,8 +207,8 @@ you will need to [retain the original copyright notice](https://github.com/cncf/ Any contributed third-party code must originally be Apache 2.0-Licensed or must carry a permissive software license that is compatible when combining with -Apache 2.0 License. At this moment, BSD and MIT are the only -[OSI-approved licenses](https://opensource.org/licenses/alphabetical) known to be compatible. +Apache 2.0 License. The CNCF maintains a list of licenses approved for inclusion +in a CNCF codebase [here](https://github.com/cncf/foundation/blob/main/allowed-third-party-license-policy.md#approved-licenses-for-allowlist). If you make substantial changes to the third-party code, _prepend_ the contributed third party file with OpenTelemetry's copyright notice.