From 2ae90ccd24cf19b860d7690a4ee61032c4077301 Mon Sep 17 00:00:00 2001 From: Shahar Harari Date: Fri, 17 May 2024 00:28:01 +0300 Subject: [PATCH] ci: add license scan workflow Signed-off-by: Shahar Harari --- .github/workflows/license-scan.yml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/license-scan.yml diff --git a/.github/workflows/license-scan.yml b/.github/workflows/license-scan.yml new file mode 100644 index 00000000000..6110ede53a5 --- /dev/null +++ b/.github/workflows/license-scan.yml @@ -0,0 +1,27 @@ +name: License Scan + +on: + pull_request: + branches: + - "main" + push: + branches: + - "main" + +permissions: + contents: read + +jobs: + scan: + runs-on: ubuntu-22.04 + steps: + - name: Checkout code + uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 + - name: Run scanner + uses: google/osv-scanner-action/osv-scanner-action@75532bf0bf75464b047d80414dbce04449498365 # v1.7.3 + with: + scan-args: |- + --skip-git + --experimental-licenses=Apache-2.0,BSD-2-Clause,BSD-2-Clause-FreeBSD,BSD-3-Clause,MIT,ISC,Python-2.0,PostgreSQL,X11,Zlib + ./ + continue-on-error: true # TODO remove once all issues are resolved \ No newline at end of file