header:
  license:
    spdx-id: Apache-2.0
    copyright-owner: Apache Software Foundation

  paths-ignore:
    - "dist"
    - "licenses"
    - "**/*.md"
    - "LICENSE"
    - "LICENSE.txt"
    - "NOTICE"
    - "NOTICE.txt"
    - "doap_Doris.rdf"
    - ".clang-format"
    - ".clang-format-ignore"
    - ".clang-tidy"
    - ".gitattributes"
    - ".gitignore"
    - ".gitmodules"
    - ".gitleaks.toml"
    - ".licenserc.yaml"
    - ".rat-excludes"
    - ".github/**"
    - ".dockerignore"
    - "be/src/common/status.cpp"
    - "be/src/common/status.h"
    - "be/src/env/env.h"
    - "be/src/env/env_posix.cpp"
    - "**/clucene/**"
    - "**/apache-orc/**"
    - "**/glibc-compatibility/**"
    - "**/gutil/**"
    - "**/go.sum"
    - "**/test_data/**"
    - "**/jmockit/**"
    - "**/*.json"
    - "**/*.csv"
    - "**/*.dat"
    - "**/*.svg"
    - "**/*.md5"
    - "**/*.patch"
    - "**/*.log"
    - "**/*.sql"
    - "**/*.lock"
    - "**/*.out"
    - "**/*.ldif"
    - "**/*.parquet"
    - "docs/.markdownlintignore"
    - "fe/fe-core/src/test/resources/data/net_snmp_normal"
    - "fe/fe-core/src/test/resources/stageUtilTest.txt"
    # Recorded method-surface baseline; ConnectorMetadataSurfaceTest reads every
    # non-blank line as a method signature, so a header would break the test.
    - "fe/fe-connector/fe-connector-spi/src/test/resources/connector-metadata-methods.txt"
    # Recorded plugin API surface baselines, one per plugin family. Same reason as
    # above: each *PluginSurfaceTest.readBaseline() adds every non-blank line to the
    # expected signature set, so a header would be read back as phantom signatures.
    - "fe/fe-connector/fe-connector-spi/src/test/resources/connector-plugin-surface.txt"
    - "fe/fe-filesystem/fe-filesystem-spi/src/test/resources/filesystem-plugin-surface.txt"
    - "fe/fe-authentication/fe-authentication-spi/src/test/resources/authentication-plugin-surface.txt"
    - "fe/fe-authorization/fe-authorization-spi/src/test/resources/authorization-plugin-surface.txt"
    - "fe/fe-core/src/test/resources/lineage-plugin-surface.txt"
    - "fe/be-java-extensions/jni-spi/src/test/resources/jni-plugin-surface.txt"
    # Golden access-control decision matrix. AccessControlBehaviorBaselineTest regenerates
    # the whole file and compares it to this one line for line, so a header would read back
    # as extra rows; it prints the regenerated path on mismatch instead.
    - "fe/fe-core/src/test/resources/access-control-behavior-baseline.txt"
    # Hive-generated CSV oracle. The FE test compares every line with regenerated
    # data, and both BE readers consume every line as a record; a header would
    # become unexpected test data. Exclude only this fixture, not all TSV files.
    - "fe/fe-connector/fe-connector-hive/src/test/resources/hive-csv-oracle.tsv"
    # Golden protocol traffic. MysqlPacketGoldenTest and FlightResultGoldenTest regenerate
    # each file in full and compare it to this one byte for byte, so a header would read back
    # as unexpected leading content; both tests print the regeneration command on mismatch.
    - "fe/fe-core/src/test/resources/protocol-golden/mysql-packets.txt"
    - "fe/fe-core/src/test/resources/protocol-golden/flight-results.txt"
    # Connector plugin settings templates. build.sh seeds each connector's live
    # <name>.conf from its template verbatim (cp -n), so the template's content IS
    # the file an administrator edits in plugins/connector/<dir>/. Matched by name
    # rather than by a **/*.conf.template glob, so a new one is a deliberate entry
    # here rather than something a wildcard silently absorbs.
    - "fe/fe-connector/fe-connector-adbc/src/main/resources/adbc.conf.template"
    - "fe/fe-connector/fe-connector-hive/src/main/resources/hms.conf.template"
    - "fe/fe-connector/fe-connector-iceberg/src/main/resources/iceberg.conf.template"
    - "fe/fe-connector/fe-connector-jdbc/src/main/resources/jdbc.conf.template"
    - "fe/fe-connector/fe-connector-paimon/src/main/resources/paimon.conf.template"
    - "fe/fe-connector/fe-connector-trino/src/main/resources/trino-connector.conf.template"
    # Golden 4.1.3 upgrade fixtures, emitted by Gen413Fixtures running real 4.1.3
    # bytecode (see the sibling PROVENANCE.txt) and stamped "do not edit by hand".
    # These are the generator's only non-binary outputs -- its .bin files are skipped
    # as binary and its .json files by the **/*.json rule above -- so listing them
    # here covers everything it writes. Deliberately NOT ignoring the directory:
    # upgrade/413/generator/Gen413Fixtures.java is real source and must stay checked.
    - "fe/fe-core/src/test/resources/upgrade/413/PROVENANCE.txt"
    - "fe/fe-core/src/test/resources/upgrade/413/editlog.index"
    - "fe/fe-core/src/test/resources/upgrade/413/labels.db.txt"
    - "fe/fe-core/src/test/resources/upgrade/413/labels.ds.txt"
    - "fe/fe-core/src/test/resources/upgrade/413/labels.tbl.txt"
    # Same for the golden 4.1.5 (Lance catalog) fixtures emitted by Gen415Fixtures;
    # upgrade/415/generator/Gen415Fixtures.java stays checked.
    - "fe/fe-core/src/test/resources/upgrade/415/PROVENANCE.txt"
    - "fe/fe-core/src/test/resources/upgrade/415/editlog.index"
    - "fe/fe-core/src/test/resources/upgrade/415/labels.db.txt"
    - "fe/fe-core/src/test/resources/upgrade/415/labels.ds.txt"
    - "fe/fe-core/src/test/resources/upgrade/415/labels.tbl.txt"
    - "fe/fe-core/src/main/java/software/amazon/awssdk/core/client/builder/SdkDefaultClientBuilder.java"
    - "fe/fe-core/src/main/antlr4/org/apache/doris/nereids/JavaLexer.g4"
    - "fe/fe-core/src/main/antlr4/org/apache/doris/nereids/JavaParser.g4"
    - "fe/.idea/vcs.xml"
    - "be/dict/ik/*"
    - "be/dict/pinyin/*"
    - "be/dict/icu/**"
    - "be/src/common/signal_handler.h"
    - "be/src/olap/lru_cache.cpp"
    - "be/src/olap/lru_cache.h"
    - "be/src/olap/skiplist.h"
    - "be/src/runtime/string_search.hpp"
    - "be/src/util/coding.cpp"
    - "be/src/util/coding.h"
    - "be/src/util/condition_variable.cpp"
    - "be/src/util/condition_variable.h"
    - "be/src/util/jsonb_document.h"
    - "be/src/util/jsonb_error.h"
    - "be/src/util/jsonb_parser.h"
    - "be/src/util/jsonb_parser_simd.h"
    - "be/src/util/jsonb_stream.h"
    - "be/src/util/jsonb_updater.h"
    - "be/src/util/jsonb_utils.h"
    - "be/src/util/jsonb_writer.h"
    - "be/src/util/murmur_hash3.cpp"
    - "be/src/util/murmur_hash3.h"
    - "be/src/util/mustache/mustache.cc"
    - "be/src/util/mustache/mustache.h"
    - "be/src/util/sse2neo.h"
    - "be/src/util/sse2neon.h"
    - "be/src/storage/index/inverted/analysis/analyzer/kuromoji/dict/darts.h"
    - "be/src/pch/*"
    - "be/test/data"
    - "be/test/expected_result"
    - "build-support/run_clang_format.py"
    - "regression-test/data"
    - "regression-test/suites/query_p0/sql_functions/conditional_functions/data.txt"
    - "docs/.vuepress/public/css/animate.min.css"
    - "docs/.vuepress/public/js/jquery.min.js"
    - "docs/.vuepress/public/js/wow.min.js"
    - "docs/package-lock.json"
    - "regression-test/script/README"
    - "regression-test/suites/load_p0/stream_load/data"
    - "docker/thirdparties/docker-compose/hive/scripts/**"
    - "docker/thirdparties/docker-compose/kerberos/paimon_data/**"
    - "docker/thirdparties/docker-compose/kerberos/sql/**"
    - "docker/thirdparties/docker-compose/iceberg/spark-defaults.conf.tpl"
    # Generated Paimon schema and snapshot metadata. These files are copied verbatim into
    # MinIO by the Iceberg third-party initializer and cannot carry source comments.
    - "docker/thirdparties/docker-compose/iceberg/scripts/preinstalled_data/paimon/**/schema/**"
    - "docker/thirdparties/docker-compose/iceberg/scripts/preinstalled_data/paimon/**/snapshot/**"
    - "docker/thirdparties/docker-compose/postgresql/certs/**"
    - "docker/thirdparties/docker-compose/mysql/certs/**"
    - "conf/mysql_ssl_default_certificate/*"
    - "conf/mysql_ssl_default_certificate/client_certificate/ca.pem"
    - "conf/mysql_ssl_default_certificate/client_certificate/client-cert.pem"
    - "conf/mysql_ssl_default_certificate/client_certificate/client-key.pem"
    - "regression-test/ssl_default_certificate/*"
    - "regression-test/pipeline/**"
    - "extension/beats/go.mod"
    - "extension/beats/go.sum"
    - "extension/dbt-doris/dev-requirements.txt"
    - "pytest/hdfs"
    - "pytest/qe"
    - "pytest/sys/data"
    - "pytest/deploy/*.conf"
    - "tools/jeprof"
    - "tools/FlameGraph/*"
    - "thirdparty/LICENSE.txt"
    - "fs_brokers/cdc_client/src/main/java/io/debezium/**"
    - "fs_brokers/cdc_client/src/main/java/com/github/shyiko/**"
  comment: on-failure