VictoriaMetrics/.github/workflows/check-licenses.yml

name: license-check
on:
  push:
    paths:
      - 'vendor'
  pull_request:
    paths:
      - 'vendor'
permissions:
  contents: read

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - name: Setup Go
        uses: actions/setup-go@main
        with:
          go-version: 1.19.2
        id: go
      - name: Code checkout
        uses: actions/checkout@master
      - name: Check License
        run: |
          make check-licenses
Add vendor license checker, update codecov action, add dependbot for … (#1280) * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action 2021-05-10 10:38:56 +02:00			`name: license-check`
			`on:`
			`push:`
			`paths:`
			`- 'vendor'`
			`pull_request:`
			`paths:`
			`- 'vendor'`
chore: Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> 2022-04-17 01:56:39 +02:00			`permissions:`
			`contents: read`

Add vendor license checker, update codecov action, add dependbot for … (#1280) * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action 2021-05-10 10:38:56 +02:00			`jobs:`
			`build:`
			`name: Build`
			`runs-on: ubuntu-latest`
			`steps:`
			`- name: Setup Go`
			`uses: actions/setup-go@main`
			`with:`
all: update the minimum required Go verson from 1.19.1 to 1.19.2 This is needed because of security vulnerabilities found in Go 1.19.1 See https://go.dev/doc/devel/release#go1.19.2 2022-10-07 21:43:36 +02:00			`go-version: 1.19.2`
Add vendor license checker, update codecov action, add dependbot for … (#1280) * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action 2021-05-10 10:38:56 +02:00			`id: go`
			`- name: Code checkout`
			`uses: actions/checkout@master`
			`- name: Check License`
			`run: \|`
Add `make check-licenses` rule for the ability to manually check licenses in vendored dependencies This is a follow-up for c687536956c6ad820bb6cbb33e1d1e02dfe7c844 2021-05-10 10:54:35 +02:00			`make check-licenses`