Merge pull request #892 from lukpueh/add-fossa-cli

Add fossa cli config for license scanning

.fossa.yml

@@ -0,0 +1,17 @@
+# Generated by FOSSA CLI (https://github.com/fossas/fossa-cli)
+# Visit https://fossa.com to learn more
+
+version: 2
+cli:
+  server: https://app.fossa.com
+  fetcher: custom
+  project: github.com/theupdateframework/tuf
+analyze:
+  modules:
+  - name: tuf
+    type: pip
+    target: .
+    path: .
+    options:
+      strategy: requirements
+      requirements: requirements.txt

.travis.yml

@@ -2,6 +2,12 @@ dist: xenial
 language: python
 cache: pip
 
+
+env:
+  global:
+    # NOTE: Public push only token (can't be used to read or edit project info)
+    - FOSSA_API_KEY=cbc317812661645ea400ab9ee6c7616a
+
 matrix:
   include:
     - python: "2.7"
@@ -22,8 +28,12 @@ matrix:
 install:
   - pip install tox coveralls
 
+before_script:
+  - "curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install.sh | sudo bash"
+
 script:
   - tox
+  - fossa
 
 after_success:
   # Workaround to get coverage reports with relative paths.

README.md

@@ -4,7 +4,7 @@
 [![Coveralls](https://coveralls.io/repos/theupdateframework/tuf/badge.svg?branch=develop)](https://coveralls.io/r/theupdateframework/tuf?branch=develop)
 [![PyUp](https://pyup.io/repos/github/theupdateframework/tuf/shield.svg)](https://pyup.io/repos/github/theupdateframework/tuf/)
 [![Python 3](https://pyup.io/repos/github/theupdateframework/tuf/python-3-shield.svg)](https://pyup.io/repos/github/theupdateframework/tuf/)
-[![FOSSA](https://app.fossa.io/api/projects/git%2Bgithub.com%2Ftheupdateframework%2Ftuf.svg?type=shield)](https://app.fossa.io/projects/git%2Bgithub.com%2Ftheupdateframework%2Ftuf?ref=badge_shield)
+[![FOSSA Status](https://app.fossa.com/api/projects/custom%2B162%2Fgithub.com%2Ftheupdateframework%2Ftuf.svg?type=shield)](https://app.fossa.com/projects/custom%2B162%2Fgithub.com%2Ftheupdateframework%2Ftuf?ref=badge_shield)
 [![CII](https://bestpractices.coreinfrastructure.org/projects/1351/badge)](https://bestpractices.coreinfrastructure.org/projects/1351)
 
 ----------------------------