VictoriaMetrics/.github/workflows/check-licenses.yml

name: license-check
on:
  push:
    paths:
      - 'vendor'
  pull_request:
    paths:
      - 'vendor'
permissions:
  contents: read

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - name: Setup Go
        uses: actions/setup-go@main
        with:
          go-version: 1.19
        id: go
      - name: Code checkout
        uses: actions/checkout@master
      - name: Check License
        run: |
          make check-licenses
Add vendor license checker, update codecov action, add dependbot for … (#1280) * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action 2021-05-10 08:38:56 +00:00			`name: license-check`
			`on:`
			`push:`
			`paths:`
			`- 'vendor'`
			`pull_request:`
			`paths:`
			`- 'vendor'`
chore: Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> 2022-04-16 23:56:39 +00:00			`permissions:`
			`contents: read`

Add vendor license checker, update codecov action, add dependbot for … (#1280) * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action 2021-05-10 08:38:56 +00:00			`jobs:`
			`build:`
			`name: Build`
			`runs-on: ubuntu-latest`
			`steps:`
			`- name: Setup Go`
			`uses: actions/setup-go@main`
			`with:`
workflows: bump go version (#2955) Some new dependencies contain generics, so we bump go version for CI. Signed-off-by: hagen1778 <roman@victoriametrics.com> 2022-08-08 07:24:15 +00:00			`go-version: 1.19`
Add vendor license checker, update codecov action, add dependbot for … (#1280) * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action 2021-05-10 08:38:56 +00:00			`id: go`
			`- name: Code checkout`
			`uses: actions/checkout@master`
			`- name: Check License`
			`run: \|`
Add `make check-licenses` rule for the ability to manually check licenses in vendored dependencies This is a follow-up for c687536956c6ad820bb6cbb33e1d1e02dfe7c844 2021-05-10 08:54:35 +00:00			`make check-licenses`