Merge pull request #138 from infinum/feature/876-add-license-scanning

Task #876 - Add license_finder to template

Author: anamarijabalaban

README.md

@@ -80,6 +80,7 @@ The `-m` flag tells the generator to run our app [template](https://github.com/i
 - Adds [Pry-Rails](https://github.com/rweng/pry-rails) to the Gemfile, inside of the development and test group
 - Adds [Rubocop](https://github.com/bbatsov/rubocop), [RSpec-Rubocop](https://github.com/backus/rubocop-rspec) & [Overcommit](https://github.com/brigade/overcommit) to the Gemfile, inside of the development group
 - Adds [Rspec-Rails](https://github.com/rspec/rspec-rails) to the Gemfile and initializes it
+- Adds [License-Finder](https://github.com/pivotal/LicenseFinder) to the Gemfile and initializes it
 - Initializes deploy script with [Mina](https://github.com/mina-deploy/mina)
 - Initializes spring binstubs
 - Updates the secrets.yml file to use Figaro and have defaults

template.rb

@@ -297,6 +297,7 @@
       gem 'brakeman', require: false
       gem 'bundler-audit', require: false
       gem 'rubocop-infinum', require: false
+      gem 'license_finder', require: false
     end
   HEREDOC
 end
@@ -692,6 +693,15 @@
     on_warn: fail
     required_executable: 'node_modules/.bin/stylelint'
     command: ['node_modules/.bin/stylelint']
+
+  LicenseFinder:
+    enabled: true
+    on_warn: fail
+    command: ['bundle', 'exec', 'license_finder']
+    requires_files: true
+    include:
+      - 'Gemfile*'
+      - 'package.json'
     HEREDOC
   end
 
@@ -783,3 +793,16 @@ def secrets
 
 # Fix default rubocop errors
 run 'bundle exec rubocop -A'
+
+# add a list of permitted licenses to license_finder configuration file
+run 'bundle exec license_finder permitted_licenses add "New BSD" "Simplified BSD" ruby "2-clause BSDL" ' \
+    '"Python-2.0" MIT "Apache 2.0" ISC CC0-1.0 CC-BY-3.0 "Mozilla Public License 2.0" LGPL MIT-0 ' \
+    '"Brakeman Public Use License" Apache "(CC-BY-4.0 AND OFL-1.1 AND MIT)" CC-BY-4.0 ' \
+    '"MPL-2.0 OR Apache-2.0" "(MIT AND Zlib)" "(WTFPL OR MIT)" "PayPal SDK License" ' \
+    '"MIT (http://mootools.net/license.txt)" "(MIT AND CC-BY-3.0)" 0BSD BSD '
+
+# add a list of restricted licenses to license_finder configuration file
+run 'bundle exec license_finder restrict add GPL-2.0 GPL-3.0'
+
+# add bundle-audit gem to approved gems list
+run 'bundle exec license_finder approvals add bundler-audit'