From 64dff9f068a961ff1c2d08454aaadfea2dd228a2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20Prpi=C4=8D?= <mprpic@redhat.com>
Date: Tue, 12 Nov 2024 16:59:23 -0500
Subject: [PATCH] Fix data license to use the only allowed value: CC0-1.0

---
 docs/sbom.md                                                 | 5 ++---
 ...l-module-management-operator-container-1.1.2-25.spdx.json | 2 +-
 ...le-management-operator-container-1.1.2-25_amd64.spdx.json | 2 +-
 ...le-management-operator-container-1.1.2-25_arm64.spdx.json | 2 +-
 ...-management-operator-container-1.1.2-25_ppc64le.spdx.json | 2 +-
 .../build/ubi9-micro-container-9.4-6.1716471860.spdx.json    | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json    | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json    | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json  | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json    | 2 +-
 sbom/examples/container_image/release/from_catalog.py        | 2 +-
 ...l-module-management-operator-container-1.1.2-25.spdx.json | 2 +-
 ...le-management-operator-container-1.1.2-25_amd64.spdx.json | 2 +-
 ...le-management-operator-container-1.1.2-25_arm64.spdx.json | 2 +-
 ...-management-operator-container-1.1.2-25_ppc64le.spdx.json | 2 +-
 .../release/ubi9-micro-container-9.4-6.1716471860.spdx.json  | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json    | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json    | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json  | 2 +-
 .../ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json    | 2 +-
 sbom/examples/product/create_product_sbom.py                 | 2 +-
 sbom/examples/product/rhel-9.2-eus.spdx.json                 | 2 +-
 sbom/examples/rpm/build/from-koji.py                         | 2 +-
 .../openshift-pipelines-client-1.14.3-11352.el8.spdx.json    | 2 +-
 sbom/examples/rpm/build/openssl-3.0.7-18.el9_2.spdx.json     | 2 +-
 sbom/examples/rpm/build/poppler-21.01.0-19.el9.spdx.json     | 2 +-
 .../openshift-pipelines-client-1.14.3-11352.el8.spdx.json    | 2 +-
 sbom/examples/rpm/release/openssl-3.0.7-18.el9_2.spdx.json   | 2 +-
 sbom/examples/rpm/release/poppler-21.01.0-19.el9.spdx.json   | 2 +-
 29 files changed, 30 insertions(+), 31 deletions(-)

diff --git a/docs/sbom.md b/docs/sbom.md
index f060266..750ea34 100644
--- a/docs/sbom.md
+++ b/docs/sbom.md
@@ -152,7 +152,7 @@ The following snippet shows a minimal SBOM document:
     ```json
     {
       "spdxVersion": "SPDX-2.3",// (1)!
-      "dataLicense": "CC-BY-4.0",// (2)!
+      "dataLicense": "CC0-1.0",// (2)!
       "SPDXID": "SPDXRef-DOCUMENT",// (3)!
       "creationInfo": {
         "created": "2006-08-14T02:34:56+00:00",
@@ -170,8 +170,7 @@ The following snippet shows a minimal SBOM document:
 
     1. SPDX version 2.3 as described at [https://spdx.github.io/spdx-spec/v2.3/](https://spdx.github.io/spdx-spec/v2.3/).
 
-    2. All Red Hat security data is published under the
-       [Creative Commons Attribution 4.0 International License](https://creativecommons.org/licenses/by/4.0/).
+    2. The CC0-1.0 license is required by the SPDX specification.
 
     3. [`SPDXID`](https://spdx.github.io/spdx-spec/v2.3/document-creation-information/#63-spdx-identifier-field)
        must be set to `SPDXRef-DOCUMENT`.
diff --git a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25.spdx.json b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25.spdx.json
index f2f5287..b0edc51 100644
--- a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25.spdx.json
+++ b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
index 6ce6e7c..400f924 100644
--- a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
+++ b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
index f130e53..7dadb79 100644
--- a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
+++ b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
index 05e892c..3172255 100644
--- a/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
+++ b/sbom/examples/container_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860.spdx.json b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860.spdx.json
index 35e873f..8228ad8 100644
--- a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860.spdx.json
+++ b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
index 179ea03..beacc7f 100644
--- a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
+++ b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json
index d3324ff..44a7fc0 100644
--- a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json
+++ b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json
index d2a52e2..cc00dbd 100644
--- a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json
+++ b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json
index 86af3e2..4a0c8e0 100644
--- a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json
+++ b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/from_catalog.py b/sbom/examples/container_image/release/from_catalog.py
index 978fa74..59eab3a 100644
--- a/sbom/examples/container_image/release/from_catalog.py
+++ b/sbom/examples/container_image/release/from_catalog.py
@@ -59,7 +59,7 @@ def create_sbom(image_id, root_package, packages, rel_type, other_pkgs=None, oth
 
     spdx = {
         "spdxVersion": "SPDX-2.3",
-        "dataLicense": "CC-BY-4.0",
+        "dataLicense": "CC0-1.0",
         "SPDXID": "SPDXRef-DOCUMENT",
         "creationInfo": {
             "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25.spdx.json b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25.spdx.json
index 97376fe..b6ae492 100644
--- a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25.spdx.json
+++ b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
index 259f657..72e84be 100644
--- a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
+++ b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
index 410a877..ee096cf 100644
--- a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
+++ b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
index 31f934b..e5a1052 100644
--- a/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
+++ b/sbom/examples/container_image/release/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860.spdx.json b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860.spdx.json
index d8d351f..0ac78bb 100644
--- a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860.spdx.json
+++ b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
index 3d38b72..025dc7f 100644
--- a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
+++ b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json
index d254f83..e45359a 100644
--- a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json
+++ b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_arm64.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json
index 6f9a503..12911ac 100644
--- a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json
+++ b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_ppc64le.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json
index 5b3cd70..c2157fa 100644
--- a/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json
+++ b/sbom/examples/container_image/release/ubi9-micro-container-9.4-6.1716471860_s390x.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/product/create_product_sbom.py b/sbom/examples/product/create_product_sbom.py
index 99ee39b..83bd81e 100644
--- a/sbom/examples/product/create_product_sbom.py
+++ b/sbom/examples/product/create_product_sbom.py
@@ -46,7 +46,7 @@ def create_spdx():
     fname = name_short + ".spdx.json"
     sbom = {
         "spdxVersion": "SPDX-2.3",
-        "dataLicense": "CC-BY-4.0",
+        "dataLicense": "CC0-1.0",
         "SPDXID": "SPDXRef-DOCUMENT",
         "creationInfo": {
             "created": "2006-08-14T02:34:56Z",
diff --git a/sbom/examples/product/rhel-9.2-eus.spdx.json b/sbom/examples/product/rhel-9.2-eus.spdx.json
index 5b8add5..470577e 100644
--- a/sbom/examples/product/rhel-9.2-eus.spdx.json
+++ b/sbom/examples/product/rhel-9.2-eus.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/rpm/build/from-koji.py b/sbom/examples/rpm/build/from-koji.py
index 5392ef2..6f1f915 100755
--- a/sbom/examples/rpm/build/from-koji.py
+++ b/sbom/examples/rpm/build/from-koji.py
@@ -417,7 +417,7 @@ def handle_srpm(filename, name):
 
 spdx = {
     "spdxVersion": "SPDX-2.3",
-    "dataLicense": "CC-BY-4.0",
+    "dataLicense": "CC0-1.0",
     "SPDXID": "SPDXRef-DOCUMENT",
     "creationInfo": {
         "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/rpm/build/openshift-pipelines-client-1.14.3-11352.el8.spdx.json b/sbom/examples/rpm/build/openshift-pipelines-client-1.14.3-11352.el8.spdx.json
index 1527811..2f82067 100644
--- a/sbom/examples/rpm/build/openshift-pipelines-client-1.14.3-11352.el8.spdx.json
+++ b/sbom/examples/rpm/build/openshift-pipelines-client-1.14.3-11352.el8.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/rpm/build/openssl-3.0.7-18.el9_2.spdx.json b/sbom/examples/rpm/build/openssl-3.0.7-18.el9_2.spdx.json
index 99d1d65..72faa12 100644
--- a/sbom/examples/rpm/build/openssl-3.0.7-18.el9_2.spdx.json
+++ b/sbom/examples/rpm/build/openssl-3.0.7-18.el9_2.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/rpm/build/poppler-21.01.0-19.el9.spdx.json b/sbom/examples/rpm/build/poppler-21.01.0-19.el9.spdx.json
index e057306..1b6a9c7 100644
--- a/sbom/examples/rpm/build/poppler-21.01.0-19.el9.spdx.json
+++ b/sbom/examples/rpm/build/poppler-21.01.0-19.el9.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/rpm/release/openshift-pipelines-client-1.14.3-11352.el8.spdx.json b/sbom/examples/rpm/release/openshift-pipelines-client-1.14.3-11352.el8.spdx.json
index d5098c6..860b88a 100644
--- a/sbom/examples/rpm/release/openshift-pipelines-client-1.14.3-11352.el8.spdx.json
+++ b/sbom/examples/rpm/release/openshift-pipelines-client-1.14.3-11352.el8.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/rpm/release/openssl-3.0.7-18.el9_2.spdx.json b/sbom/examples/rpm/release/openssl-3.0.7-18.el9_2.spdx.json
index e7b5c26..3328b82 100644
--- a/sbom/examples/rpm/release/openssl-3.0.7-18.el9_2.spdx.json
+++ b/sbom/examples/rpm/release/openssl-3.0.7-18.el9_2.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",
diff --git a/sbom/examples/rpm/release/poppler-21.01.0-19.el9.spdx.json b/sbom/examples/rpm/release/poppler-21.01.0-19.el9.spdx.json
index d4c33dc..85d04af 100644
--- a/sbom/examples/rpm/release/poppler-21.01.0-19.el9.spdx.json
+++ b/sbom/examples/rpm/release/poppler-21.01.0-19.el9.spdx.json
@@ -1,6 +1,6 @@
 {
   "spdxVersion": "SPDX-2.3",
-  "dataLicense": "CC-BY-4.0",
+  "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "creationInfo": {
     "created": "2006-08-14T02:34:56+00:00",