Background documents

[Tony Aiuto]

Some reading about what we have been doing.   Please remember that while many of the design documents talk strictly about licenses, the problem of producing an accurate SBOM is technically no different. The Bazel team's intent is to use a single code base for both purposes.

• The overall philosophy: License Checking with Bazel
• Requirements for bzlmod and repository rules to support license/package attestation: OSS Licenses and Bazel Dependency Management
• Technical details of a path we are trying: Design notes: Extensive Bazel external repository patching
• Core license/package rules: https://github.com/bazelbuild/rules_license