From ab7d50149885d2d96d69e8649802c120630e59c7 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 13 Jun 2026 20:45:10 +0000 Subject: [PATCH] fix(license): restore MPL-2.0 on secret-scanner.yml + scorecard.yml Both workflow files carried SPDX PMPL-1.0, applied by a prior bulk license sweep (see CHANGELOG: "global AGPL-3.0-or-later -> PMPL-1.0-or-later replacement"). Per estate policy PMPL is reserved for palimpsest-license, palimpsest-plasma, and consent-aware-http only; empty-linter is a sole-owner repo and defaults to MPL-2.0 (matching every other workflow here). The identifier was also malformed (PMPL-1.0 vs the repo's PMPL-1.0-or-later). Owner-approved, per-file correction; no other files touched. https://claude.ai/code/session_01EqEysvTPzPwhS9ZGY7EYdr --- .github/workflows/scorecard.yml | 2 +- .github/workflows/secret-scanner.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 346971a..a28b67c 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -1,5 +1,5 @@ # // Copyright (c) Jonathan D.A. Jewell -# SPDX-License-Identifier: PMPL-1.0 +# SPDX-License-Identifier: MPL-2.0 name: Scorecards supply-chain security on: diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index d61a08a..f36fdd4 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -1,5 +1,5 @@ # // Copyright (c) Jonathan D.A. Jewell -# SPDX-License-Identifier: PMPL-1.0 +# SPDX-License-Identifier: MPL-2.0 name: Secret Scanner on: pull_request: