Sonatype CLM Server - Policy Management Guide
An important aspect of license threat groups is that each one also has a threat level, just like policy (from zero signifying no threat all the way up to 10). Unless you have specific legal recommendation / council, the default license threat groups will suffice, especially in the beginning. However, they can be edited. In fact, entirely new ones can be created altogether. Let’s use that premise, and create a new license threat group, Banned Licenses. When creating the license threat group, keep in mind that they will be inherited from the organization to all associated applications.
- Log in to the Sonatype CLM Server (by default this is available at http://localhost:8070) using a user account with at least Owner-level permissions for the organization or application (a member of the Owner Group).
- Click on the Organizations (or Applications) link, and then click on the organization (or application) you want to add the label in.
- Click the Licenses tab, and then the New License Threat Group button.
- Enter Banned Licenses for the name, and pick a threat level
-
Add the following licenses from the Available Licenses to the Applied Licenses list by clicking on them in the list on the right
- AGPL-3.0
- AGPL
- When everything is done you screen should look like Figure 7.2, “Creating a Condition Evaluating a Label” and you can click the Save button to finish.
