CI: Use v3 of fossa-action and exclude maven (#15140)

vitessio · Feb 11, 2024 · fcd5ad4 · fcd5ad4
1 parent ea62cee
commit fcd5ad4
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/.fossa.yml b/.fossa.yml
@@ -0,0 +1,11 @@
+version: 3
+
+project:
+  id: vitess
+  name: vitess
+
+# Exclude the maven based scanning of our java client until we can get it working again.
+targets:
+  exclude:
+    - type: maven
+      path: java
diff --git a/.github/workflows/static_checks_etc.yml b/.github/workflows/static_checks_etc.yml
@@ -39,8 +39,10 @@ jobs:
         # generate a push only token and specify that as plain
         # text here:
         #   https://github.com/fossa-contrib/fossa-action#push-only-api-token
+        # BUT, it also requires that the fork have its own
+        # independent integration setup with fossa.com.
         if: github.ref == 'refs/heads/main'
-        uses: fossa-contrib/fossa-action@v2
+        uses: fossa-contrib/fossa-action@v3
         with:
           fossa-api-key: ${{ secrets.FOSSA_API_KEY }}