fossology.yml

name: Fossology check
on: [push, pull_request]

# permissions:
#   contents: read

jobs:
  fossology:
    runs-on: ubuntu-latest
    
    container:
      image: fossology/fossology:scanner@9dc09dd357cb9a686ff79494aec20347a216f7c25252e58c71acf84f095dee79

    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11

      - name: Fossology run
        run: |
          export GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
          export GITHUB_REPO_OWNER=${{ github.actor }}
          export GITHUB_REPO_URL=https://github.com/${{ github.repository}}
          export GITHUB_PULL_REQUEST="None"
          # echo "GITHUB_TOKEN=$GITHUB_TOKEN" >> $GITHUB_ENV
          /bin/fossologyscanner repo nomos ojo copyright keyword
          username: ${{ github.actor }}
        # env:
        #   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        #   GITHUB_PULL_REQUEST: "None"
        #   GITHUB_REPO_OWNER: ${{ github.actor }}
        continue-on-error: false

      - name: Upload artifact
        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce
        with:
          name: scan-fossology-report
          path: ./results

      - name: Artifact download
        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
        with:
          name: scan-fossology-report