Skip to content

Dependency License Scanning #47

Dependency License Scanning

Dependency License Scanning #47

Workflow file for this run

name: Dependency License Scanning
on:
workflow_dispatch:
pull_request:
paths:
- ".github/.fossa.yml"
- ".github/workflows/fossa.yml"
schedule:
- cron: '0 0 * * 6' # At 00:00 on saturdays
permissions:
contents: read
jobs:
fossa:
name: Fossa
runs-on: ubuntu-latest
if: github.repository == 'gnolang/gno'
steps:
- name: Checkout
uses: actions/checkout@v4
with:
# we don't know what commit the last tag was it's safer to get entire repo so previousStableVersion resolves
fetch-depth: 0
- name: Move .fossa.yml to root dir
run: mv .github/.fossa.yml .
- name: Cache Coursier cache
uses: coursier/[email protected]
- name: Set up JDK 17
uses: coursier/[email protected]
with:
jvm: temurin:1.17
- name: Set up fossa CLI
run: "curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash"
- name: FOSSA analyze
run: fossa analyze
env:
FOSSA_API_KEY: "${{secrets.FOSSA_API_KEY}}"
- name: FOSSA test
run: fossa test
env:
FOSSA_API_KEY: "${{secrets.FOSSA_API_KEY}}"