Skip to content

Add CI workflow to check for unapproved Go dependency licenses #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

MatteoPologruto
Copy link
Contributor

A task and GitHub Actions workflow are provided here for checking the license types of Go project dependencies.

On every push and pull request that affects relevant files, the CI workflow will use Licensed to check:

  • If the dependency licenses cache is up to date
  • If any of the project's dependencies have an unapproved license type.

Approval can be based on:

@MatteoPologruto MatteoPologruto added type: enhancement Proposed improvement topic: infrastructure Related to project infrastructure labels Jun 14, 2023
@MatteoPologruto MatteoPologruto self-assigned this Jun 14, 2023
Copy link

@umbynos umbynos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, I'd only write a comment in .licensed.yml file for our future self, to indicate that the file is not complete.

A task and GitHub Actions workflow are provided here for checking the license types of Go project dependencies.

On every push and pull request that affects relevant files, the CI workflow will check:

- If the dependency licenses cache is up to date
- If any of the project's dependencies have an unapproved license type.

Approval can be based on:

- Universally allowed license type
- Individual dependency
@MatteoPologruto MatteoPologruto force-pushed the add-check-go-dependencies branch from dd25787 to fa852ac Compare June 19, 2023 07:21
@MatteoPologruto MatteoPologruto merged commit bcc6d50 into arduino:master Jun 19, 2023
@MatteoPologruto MatteoPologruto deleted the add-check-go-dependencies branch June 19, 2023 07:25
@MatteoPologruto MatteoPologruto mentioned this pull request Jun 19, 2023
7 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
topic: infrastructure Related to project infrastructure type: enhancement Proposed improvement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants