mirror of
https://github.com/replicatedhq/troubleshoot.git
synced 2026-02-14 18:29:53 +00:00
b2f22b4cfc
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
|
|
env:
|
|
TRIVY_VERSION: 0.44.1
|
|
|
|
name: License scan
|
|
|
|
jobs:
|
|
license:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
- name: Install trivy
|
|
run: |
|
|
wget https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.deb
|
|
sudo dpkg -i trivy_${TRIVY_VERSION}_Linux-64bit.deb
|
|
|
|
- name: Create license report artifact
|
|
run: trivy fs --scanners license --skip-dirs ".github" . | tee license-report.txt
|
|
|
|
- name: Upload license report artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: license-report
|
|
path: license-report.txt
|
|
|
|
- name: Check for unknown licenses
|
|
run: trivy fs --scanners license --skip-dirs ".github" --exit-code 1 --severity UNKNOWN . || echo "::warning::Unknown licenses found, please verify"
|
|
|
|
- name: Check for forbidden licenses and fail
|
|
run: trivy fs --scanners license --skip-dirs ".github" --exit-code 1 --severity CRITICAL,HIGH .
|