Add SPDX headers & enforcement to all egeria* repositories

[planetf1]

Is there an existing issue for this?

• I have searched the existing issues

Please describe the new behavior that that will improve Egeria

Egeria currently enforces SPDX headers similar to:

# SPDX-License-Identifier: Apache-2.0
# Copyright Contributors to the ODPi Egeria project.

where the comments are file type dependent.

However this has not been applied across all repositories - typically files were initially created with these headers, but as there is no build-time enforcement, the headers can get dropped, or missed from new files.

In addition the current enforcement in the main egeria repository relies on maven, but we are moving to gradle.

This issue is opened to track verifying and enforcing across all repos, through a combination of

• guidance in our documentation
• seeing if we can create common build scripts to more easily maintain
• adding in each repo

Alternatives

No response

Any Further Information?

No response

Would you be prepared to be assigned this issue to work on?

• I can work on this

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 20 days if no further activity occurs. Thank you for your contributions.

[planetf1]

Another alternative proposed was spotless

This offers a lot of code formatting flexibility - however for now we purely want to check license headers
It does more easily allow for scans of non-java code

In experimenting, I was not able to

• handle varying whitespace (between comments and texts)
• invoke both license & copyright check

I raised diffplug/spotless#1611 to pose the question - if it is possible with spotless, we can refactor to use that more modern/flexible plugin instead.