Open Source at Turbot

Open Source and Trademarks

Turbot HQ, Inc (Turbot) manages hundreds of open source repositories, each licensed under Apache 2.0, AGPL 3.0 or similar licenses. You can find the software on GitHub.

Turbot Guardrails, Turbot Pipes, Steampipe, Powerpipe, and Flowpipe are products produced from the open source software, exclusively by Turbot. They are distributed under our commercial terms.

Others are allowed to make their own distribution of the open-source software, but they cannot use any of the Turbot trademarks on products they create.

If you are familiar with how Red Hat or The System Initiative work, Turbot is very similar. If you'd like to understand this in more detail, we recommend reading the System Initiative FAQ.

I just want to use your open source products, can I do that?

Of course! Steampipe, Powerpipe, and Flowpipe are free to download and use like any other open-source tool.

How can I contribute to Turbot's open source projects?

Please get involved! We love open-source collaboration and have merged hundreds of contributions (large and small) across our projects. We check GitHub for issues and PRs and hang out in the #contributors channel on Slack.

For contributions to our AGPL 3.0 and CC BY-NC-ND licensed repositories we ask that you sign our Contributor License Agreement (CLA). The CLA simply states your contributions are given under conditions like an Apache 2.0 license. The majority of our open source repositories are Apache 2.0, so do not require a CLA. To understand more about the “license in” vs the “license out” for a project watch this great video from Heather Meeker.

To sign the CLA, submit a pull request on any applicable Turbot project. You'll receive a link via a comment for a one-time signing process.

Can I distribute or embed Turbot software in my own product or tool?

You are not allowed to market or sell software that includes any of the Turbot trademarks (logo, name, wordmarks, etc.). For more details of what you are and are not allowed to do with our marks, see our trademark policy.

Our open source software does contain our trademarks. You are free to distribute that software under the terms of the open source license. However, the open source license does not give you the right to use our trademarks or logos. Distribution of the software includes binary downloads, docker containers, running a software as a service, etc.

When you create a distribution, you must remove all our visible trademarks from the product. For example, anywhere in the user interface that our logo appears, it must be removed or replaced with a different logo. Any written reference to our trademarks that are visible to an end user must be removed. You do not need to alter every place a trademark may appear in the source code - only places where an end user will see it. For example, the steampipe command line tool must be renamed (it is customer facing), while a function in the source code with `steampipe` in its name does not (it is not customer facing).

You may not imply in any way that Turbot authorizes, sponsors, or is the source of your distribution, but you can state that your distribution contains some Turbot source code – that’s actually required by the open source license. The build systems, quality control, telemetry, services, APIs and community infrastructure we have created represent the quality control of Turbot’s products which are operated for our customers.

This framework provides a level playing field for everyone. For our community to be as healthy as possible, all community members should operate on a level playing field. The software is equally available to everyone to use, modify and distribute, but only we can use our trademarks on our products.

Can I use or embed a Turbot AGPL licensed tool in my own product?

Yes - subject to the terms of the AGPL, our trademark policy, and Turbot’s terms of use.

Per Turbot's trademark policy and terms of use you must modify the program to remove all references to our trademarks and use of services we provide to customers (e.g. registry, documentation, etc).

Under the AGPL, if you are providing the modified program to others - either as downloadable software or allowing them to use it remotely through a computer network - then the entire corresponding source of your modified program must also be licensed under the AGPL.

All distributions of software must follow the source code sharing requirements of AGPL. (They are the same as for GPLv3.)

For online services, if you are providing a managed service that substitutes for the functionality of our AGPL software, then that is "remote network interaction." For example:

  • If you make our AGPL software available with a thin user interface, that is subject to the source code sharing requirements of AGPL.
  • If your service allows users to do the following, you must share your source code as required by AGPL, examples:
    • Access our APIs
    • Browse or interact with web components (e.g. interactive Powerpipe dashboards)
    • Execute CLI commands or view CLI output
    • Execution of user-defined code (e.g. SQL queries, HCL mods, etc)

The modified program and corresponding source does not mean only your specific changes to Turbot software. Unless you are using it as a “general-purpose tool” and “not part of the work” for your modified program then your entire modified program would now be subject to the AGPL.

If you have questions, we recommend that you talk to your own attorney for legal advice. Please contact sales if you’d like to discuss a commercial arrangement with Turbot to remove these restrictions.

Can I make developer builds of Turbot software?

Yes, you can make builds for internal R&D, testing, or development purposes. But once you distribute the build or make it available to others, you have to follow the rules of AGPL and avoid misusing our trademarks.

What services must I stop using if I make my own distribution?

You can use any services we provide to enable community collaboration: GitHub, Slack, etc.

You may not use services provided by Turbot as part of the product, such as authentication, documentation, package sharing, telemetry, build systems, automated testing, etc. All access to our online services requires you to agree to our Terms of Service. These are not open source licenses, and impose restrictions on your manner and level of use.

We often open-source the software we use to run these services for the benefit of our customers — but you will have to run them yourself. Or you can consider becoming a partner, and support us in providing those services for the community.

What if I have additional questions not answered here?

Reach out in the #contributors channel on Slack, or contact sales directly.