Updated github->actions

Signed-off-by: Taras Drozdovskyi <t.drozdovsky@samsung.com>

.github/workflows/build.yml

@@ -12,7 +12,7 @@ jobs:
         platform: [numaker_pfm_m2351, m2351_badge, mps2_an505_qemu]
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install extra tools
         run: |

.github/workflows/fossology.yml

@@ -9,17 +9,25 @@ jobs:
     runs-on: ubuntu-latest
 
     container:
-      image: fossology/fossology:scanner
+      image: fossology/fossology:scanner@sha256:fdc87d4ec8a57a79bd09fef0cc7e6289cb6a03d079a170ea3b19c0e1449a933f
 
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Fossology run
         run: |
-          export GITHUB_TOKEN=${{secrets.GITHUB_TOKEN}}
-          export GITHUB_PULL_REQUEST="None"
-          /bin/fossologyscanner repo nomos ojo copyright keyword
-        continue-on-error: true
+          export GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
+          export GITHUB_REPO_OWNER=${{ github.actor }}
+          export GITHUB_REPO_URL=https://github.com/${{ github.repository}}
+          export GITHUB_PULL_REQUEST=${{ github.event.number }}
+          # echo "GITHUB_TOKEN=$GITHUB_TOKEN" >> $GITHUB_ENV
+          /bin/fossologyscanner repo nomos ojo 
+          # copyright keyword
+        # env:
+        #   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        #   GITHUB_PULL_REQUEST: "None"
+        #   GITHUB_REPO_OWNER: ${{ github.actor }}
+        continue-on-error: false
 
       - name: Upload artifact
         uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce

.github/workflows/fossology_test.yml

@@ -0,0 +1,37 @@
+name: Check diff for license with Fossology
+
+on: [push, pull_request]
+
+
+jobs:
+  check-license:
+    name: Check license
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v3
+      - run: |
+          docker run --rm --name "fossologyscanner" -w "/opt/repo" -v ${PWD}:/opt/repo \
+            -e GITHUB_TOKEN=${{ github.token }} \
+            -e GITHUB_PULL_REQUEST=${{ github.event.number }} \
+            -e GITHUB_REPOSITORY=${{ github.repository }} \
+            -e GITHUB_REPO_URL=${{ github.repositoryUrl }} \
+            -e GITHUB_REPO_OWNER=${{ github.repository_owner }} \
+            -e GITHUB_API=${{ github.api_url }} \
+            -e GITHUB_ACTIONS \
+            fossology/fossology:scanner "/bin/fossologyscanner" repo nomos ojo
+
+  check-copyright:
+    name: Check copyright
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v3
+      - run: |
+          docker run --rm --name "fossologyscanner" -w "/opt/repo" -v ${PWD}:/opt/repo \
+            -e GITHUB_TOKEN=${{ github.token }} \
+            -e GITHUB_PULL_REQUEST=${{ github.event.number }} \
+            -e GITHUB_REPOSITORY=${{ github.repository }} \
+            -e GITHUB_API=${{ github.api_url }} \
+            -e GITHUB_REPO_URL=${{ github.repositoryUrl }} \
+            -e GITHUB_REPO_OWNER=${{ github.repository_owner }} \
+            -e GITHUB_ACTIONS \
+            fossology/fossology:scanner "/bin/fossologyscanner" repo copyright keyword

.github/workflows/license-finder.yml

@@ -12,7 +12,7 @@ jobs:
       image: gianlucadb0/license_finder
 
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: License finder run
         run: | 

.github/workflows/scancode.yml

@@ -12,7 +12,7 @@ jobs:
       image: gianlucadb0/scancode-toolkit
 
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Create results directory
         run: mkdir results

.github/workflows/scorecards-analysis.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           persist-credentials: false