GPL-1.0 false alarm improvement

[soimkim]

Description

Please leave a brief description of the bug or feature request:
File to analyze : https://android.googlesource.com/platform/external/dng_sdk/+/refs/tags/android-12.0.0_r25/Android.bp
// e.g. GPL in an MIT project might only apply to the contrib/ directory.

Because of the above sentence, Android.bp of many AOSP(https://android.googlesource.com/platform/) is analyzed as GPL-1.0.
Is there any way to handle that statement as an exception?

How To Reproduce

Tell us how to reproduce the issue.

1. Download a file : https://android.googlesource.com/platform/external/dng_sdk/+/refs/tags/android-12.0.0_r25/Android.bp
2. Run ScanCode

System configuration

For bug reports, it really helps us to know:

• What OS are you running on? ubuntu 20.04
• What version of scancode-toolkit was used to generate the scan file? 30.1.0
• What installation method was used to install/run scancode? pip

[pombreda]

@soimkim thank you very much, this is excellent catch!

Is there any way to handle that statement as an exception?

Yes! it should be straight forward to create a is_false_positive rule for this sentence
e.g. GPL in an MIT project might only apply to the contrib/ directory. such that this is not detected as a false positive.

(Side note: shame on the Android developers for putting misleading licensing comments in their code! )
(Other side note: the move to Androird using Bazel build scripts has happened then... which means that we can tune the Bazel parser to ensure Android structure licensing details found in these are captured correctly ... using https://github.com/nexB/scancode-toolkit/blob/develop/src/packagedcode/build.py#L92 @JonoYang ^ FYI )

BTW, we should also add a new DNG license for the patent part https://android.googlesource.com/platform/external/dng_sdk/+/refs/heads/master/PATENTS @DennisClark FYI

[pombredanne]

@KevinJi22 Thank you for fixing this in #2799