From bf9e12bbf086b995164dfb6acca178b3092a3104 Mon Sep 17 00:00:00 2001
From: tools-netlify <statusbot+tools@netlify.com>
Date: Tue, 6 Jul 2021 22:03:52 +0000
Subject: [PATCH] create github actions workflow files for fossa
---
.github/workflows/fossa.yml | 38 +++++++++++++++++++++++++++++++++++++
1 file changed, 38 insertions(+)
create mode 100644 .github/workflows/fossa.yml
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
new file mode 100644
index 00000000..46945dee
--- /dev/null
+++ b/.github/workflows/fossa.yml
@@ -0,0 +1,38 @@
+name: Dependency License Scanning
+
+on:
+ push:
+ branches:
+ - chore/fossa-workflow
+ - main
+
+defaults:
+ run:
+ shell: bash
+
+jobs:
+ fossa:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout
+ uses: actions/checkout@v2
+ - name: Download fossa cli
+ run: |-
+ curl -L https://github.com/fossas/fossa-cli/releases/download/v1.1.2/fossa-cli_1.1.2_linux_amd64.tar.gz > fossa-cli.tar.gz
+ tar -xvzf fossa-cli.tar.gz
+ mkdir -p $HOME/.local/bin
+ echo "$HOME/.local/bin" >> $GITHUB_PATH
+ mv fossa $HOME/.local/bin/fossa
+ - name: Fossa init
+ run: fossa init
+ - name: Set env
+ run: echo "line_number=$(grep -n "project" .fossa.yml | cut -f1 -d:)" >> $GITHUB_ENV
+ - name: Configuration
+ run: |-
+ sed -i "${line_number}s|.*| project: git@github.com:${GITHUB_REPOSITORY}.git|" .fossa.yml
+ cat .fossa.yml
+ - name: Upload dependencies
+ run: fossa analyze --debug
+ env:
+ FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }}
+