diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml new file mode 100644 index 0000000..e7a8672 --- /dev/null +++ b/.github/workflows/fossa.yml @@ -0,0 +1,48 @@ +# +# Copyright 2021 The Dapr Authors +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# http://www.apache.org/licenses/LICENSE-2.0 +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +name: fossa +on: + push: + branches: + - master + - release-* + - feature/* + tags: + - v* + pull_request: + branches: + - master + - release-* + - feature/* + workflow_dispatch: {} +jobs: + fossa-scan: + if: github.repository_owner == 'dapr' # FOSSA is not intended to run on forks. + runs-on: ubuntu-latest + env: + FOSSA_API_KEY: b88e1f4287c3108c8751bf106fb46db6 # This is a push-only token that is safe to be exposed. + steps: + - name: "Checkout code" + uses: actions/checkout@v2 + + - name: "Run FOSSA Scan" + uses: fossas/fossa-action@main # Use a specific version if locking is preferred + with: + api-key: ${{ env.FOSSA_API_KEY }} + + - name: "Run FOSSA Test" + uses: fossas/fossa-action@main # Use a specific version if locking is preferred + with: + api-key: ${{ env.FOSSA_API_KEY }} + run-tests: true \ No newline at end of file diff --git a/README.md b/README.md index 75a6aa1..61f4759 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,7 @@ # Dapr Dashboard [![codecov](https://codecov.io/gh/dapr/dashboard/branch/master/graph/badge.svg)](https://codecov.io/gh/dapr/dashboard) +[![FOSSA Status](https://app.fossa.com/api/projects/custom%2B162%2Fgithub.com%2Fdapr%2Fdashboard.svg?type=shield)](https://app.fossa.com/projects/custom%2B162%2Fgithub.com%2Fdapr%2Fdashboard?ref=badge_shield) Dapr Dashboard is a web-based UI for Dapr, allowing users to see information, view logs and more for the Dapr applications, components, and configurations running either locally or in a Kubernetes cluster.