From c867a20e0540280b4a72122c9584b6b2fb21abf9 Mon Sep 17 00:00:00 2001 From: Divyam Talwar Date: Tue, 30 Jun 2026 03:09:19 +0530 Subject: [PATCH] Stop advertising Docker artifacts as MIT licensed The Docker deployment guide and official Dockerfile still advertised MIT licensing even though the image bundles components with multiple license sources. Remove the stale top-level MIT signals and point Docker readers to repository license files plus bundled package metadata rather than publishing an incomplete single-license OCI expression. Constraint: Use repository license files and package manifests as source references; the Docker image copies ee/, fde, and morphik_rust, which carry distinct licensing surfaces. Rejected: Replace the OCI label with BUSL-1.1 | the published image includes other bundled components, so BUSL-1.1 alone would be incomplete. Rejected: Change bundled Rust or fde package license metadata here | package metadata is copied into the image but may be component-specific and needs separate maintainer/legal review. Confidence: high Scope-risk: narrow Directive: Do not restore an OCI license annotation until maintainers/legal define the complete image license expression. Tested: rg -n -F -- "- License: The Docker image bundles components under multiple licenses. Review [LICENSE](./LICENSE), [ee/LICENSE](./ee/LICENSE), and bundled package metadata before production use." DOCKER.md; if rg -n "License:\s*MIT|org.opencontainers.image.licenses=\"MIT\"|org.opencontainers.image.licenses=\"BUSL-1.1\"" dockerfile DOCKER.md -S; then echo unexpected top-level Docker license reference found; exit 1; else echo no stale top-level Docker doc/OCI label reference found; fi; docker buildx build --check -f dockerfile .; git diff --check origin/main...HEAD Not-tested: legal review; full Docker image build; historical published image metadata; bundled package license metadata alignment --- DOCKER.md | 2 +- dockerfile | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/DOCKER.md b/DOCKER.md index a9e02c75..4a5ce454 100644 --- a/DOCKER.md +++ b/DOCKER.md @@ -173,4 +173,4 @@ For issues and feature requests: ## Repository Information -- License: MIT +- License: The Docker image bundles components under multiple licenses. Review [LICENSE](./LICENSE), [ee/LICENSE](./ee/LICENSE), and bundled package metadata before production use. diff --git a/dockerfile b/dockerfile index f5c86d8a..2979e21f 100644 --- a/dockerfile +++ b/dockerfile @@ -191,7 +191,6 @@ LABEL org.opencontainers.image.title="Morphik Core" LABEL org.opencontainers.image.description="Morphik Core - A powerful document processing and retrieval system" LABEL org.opencontainers.image.source="https://github.com/morphik-org/morphik-core" LABEL org.opencontainers.image.version="1.0.0" -LABEL org.opencontainers.image.licenses="MIT" # Expose port EXPOSE 8000