Add license scan report and status

[fossabot]

Your FOSSA integration was successful! Attached in this PR is a badge and license report to track scan status in your README.

Below are docs for integrating FOSSA license checks into your CI:

• CircleCI
• TravisCI
• Jenkins
• Other

[codecov-io]

Codecov Report

❗ No coverage uploaded for pull request base (master@7ffa3fc). Click here to learn what that means.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master    #7849   +/-   ##
=========================================
  Coverage          ?   41.39%           
=========================================
  Files             ?      474           
  Lines             ?    63780           
  Branches          ?        0           
=========================================
  Hits              ?    26399           
  Misses            ?    33942           
  Partials          ?     3439

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7ffa3fc...7195653. Read the comment docs.

[lafriks]

I don't think readme is right place for such report

[lunny]

@lafriks but it seems all other repositories put that link on README.

[lafriks]

We should first add this as drone task then to update this data from master

[lafriks]

imho it still looks kind of messy. It does show licenses also of dependency tool licenses that we really don't care much, it does not correctly detect license of cobra library

[gary-kim]

I use FOSSA in one of my projects and from my experience, mismatched licenses and false positives do happen often and will need to be dealt with.

[stale]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 months. Thank you for your contributions.

[lunny]

@gary-kim any better tool to recommend?

[6543]

can we close this?