diff --git a/exec-container/.gitignore b/exec-container/.gitignore index e2f5dd2..e8b40e6 100644 --- a/exec-container/.gitignore +++ b/exec-container/.gitignore @@ -1 +1,5 @@ -result \ No newline at end of file +result +http_cache.sqlite +sbom.cdx.json +sbom.spdx.json +sbom.csv diff --git a/exec-container/license-check.sh b/exec-container/license-check.sh new file mode 100755 index 0000000..6db0174 --- /dev/null +++ b/exec-container/license-check.sh @@ -0,0 +1,12 @@ +#!/usr/bin/env bash + +if type sbomnix &> /dev/null; then + sbomnix .#environment +else + nix-shell -p sbomnix --run "sbomnix .#environment" +fi + +if grep -q "AGPL" sbom.spdx.json; then + echo "Error: AGPL license found in sbom.spdx.json." + exit 1 +fi