Clarify License and Data Use Policies

[JohnConnorRF]

Hey guys, this project is really cool. A great contribution to the community.

One issue I had is in finding the license agreement on using the tool. Do you guys have any documentation on how YARA rules that are tested are retained or used by VirusTotal?

[plusvic]

Thanks for you feedback!. VirusTotal does not retain or uses your YARA rules in any way, except for running the checks. Once the checks are finished we don't keep copies of your rules. We may publish a more formal license agreement in the future, for the time being the spirit of YARA-CI is the same one of similar continuous integration tools, they can see the code that you are testing, but it's still your code.

[JohnConnorRF]

Hey @plusvic, just revisiting this topic. While I'd love to use Yara-CI, I can't without a formal license that I can point to for my organization's compliance. Any chance you guys have something and I just missed it on https://yara-ci.cloud.virustotal.com/?

Appreciate the consideration

[plusvic]

Hi @JohnConnorRF, YARA-CI is still a very experimental project and we are not ready to make it formal with a license agreement yet. We are still evaluating if the community finds YARA-CI useful and it has enough traction.