diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..123014908 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,6 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" diff --git a/.github/workflows/check-licenses.yml b/.github/workflows/check-licenses.yml new file mode 100644 index 000000000..ce272b70d --- /dev/null +++ b/.github/workflows/check-licenses.yml @@ -0,0 +1,26 @@ +name: license-check +on: + push: + paths: + - 'vendor' + pull_request: + paths: + - 'vendor' +jobs: + build: + name: Build + runs-on: ubuntu-latest + steps: + - name: Setup Go + uses: actions/setup-go@main + with: + go-version: 1.16 + id: go + - name: Dependencies + run: | + go get -u github.com/frapposelli/wwhrd + - name: Code checkout + uses: actions/checkout@master + - name: Check License + run: | + wwhrd check diff --git a/.wwhrd.yml b/.wwhrd.yml new file mode 100644 index 000000000..5afba720d --- /dev/null +++ b/.wwhrd.yml @@ -0,0 +1,7 @@ +blacklist: + - GPL-2.0 +whitelist: + - Apache-2.0 + - MIT + - BSD-3-Clause + - BSD-2-Clause