Files
deploy/NOTICE
T
zeekay 602fb80517 deploy: state the fork in a NOTICE and build our own image
NOTICE follows the house Hanzo-first pattern: Hanzo CD on top, the fork
stated plainly with the upstream tag and commit it was taken at, then
upstream retained below. Upstream ships no NOTICE, so there is nothing to
propagate under Section 4(d), and LICENSE is their Apache-2.0 text
verbatim. Copyright is claimed only over what we authored; the tree is
overwhelmingly The Argo Authors' work and says so.

hanzo-image.yml publishes ghcr.io/hanzoai/deploy from Hanzo runners. It is
one file, identical on master and on hanzo/**, so the two lineages do not
drift apart in how they build.

Upstream's image.yaml and release.yaml are left untouched. They are
dormant today because GitHub disables workflows on a fork, and only
pages-build-deployment is registered. That dormancy is load-bearing:
image.yaml fires on a push to master and release.yaml on a v* tag, both
onto ubuntu-24.04 runners and both publishing to quay.io/argoproj. Turning
Actions on to run this workflow arms those at the same time, so enabling
must be paired with disabling them per workflow.

The Dockerfile's docker.io build bases are not repointed yet: hanzoai/node
publishes 18.19.0-alpine where the UI build needs 24.x, and
hanzoai/{ubuntu,golang} are private, so their tags cannot be enumerated to
pin them.
2026-07-16 14:02:09 -07:00

39 lines
1.6 KiB
Plaintext

Hanzo CD
Copyright (c) 2026 Hanzo AI, Inc.
Forked from https://github.com/argoproj/argo-cd at v3.4.5
(commit 564b94973b284b8de98da7cee6eeade2cb941e46).
This product includes software from Argo CD
(https://github.com/argoproj/argo-cd), licensed under Apache-2.0:
Copyright 2017-2018 The Argo Authors
Upstream Argo CD ships no NOTICE file (only LICENSE); there are no
Apache-2.0 Section 4(d) attributions to propagate from upstream. LICENSE in
this repository is upstream's Apache-2.0 text, retained verbatim and
unmodified.
The overwhelming majority of this repository is upstream Argo CD source,
authored by The Argo Authors and its contributors, who retain their
copyright. Hanzo AI, Inc. claims copyright only in the changes it authored.
This product also includes software from third-party Go modules imported at
their upstream paths. Their copyright notices are preserved within those
modules, and the upstream projects retain their respective rights.
DEVIATIONS
Changes made by Hanzo AI, Inc. relative to upstream Argo CD v3.4.5, per
Apache-2.0 Section 4(b):
- Repackaged from the Go module github.com/argoproj/argo-cd/v3 to
github.com/hanzoai/deploy/v3. The /v3 major suffix is retained so release
tags stay in correspondence with the upstream v3 lineage a release is cut
from, which is what keeps upstream security advisories answerable against
our builds. Behaviour is unchanged by the rename.
- Container images are built by Hanzo CI on Hanzo runners and published to
ghcr.io/hanzoai/deploy, rather than quay.io/argoproj/argocd.
- Product name is Hanzo CD.