fossology.yml

name: Fossology check
on: [push, pull_request]

# permissions:
#   contents: read

jobs:
  fossology:
    runs-on: ubuntu-latest
    
    container:
      image: fossology/fossology:scanner

    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11

      - name: Fossology run
        run: |
          # export GITHUB_TOKEN=${{secrets.GITHUB_TOKEN}}
          # export GITHUB_PULL_REQUEST="None"
          # echo "GITHUB_TOKEN=$GITHUB_TOKEN" >> $GITHUB_ENV
          /bin/fossologyscanner repo nomos ojo copyright keyword
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GITHUB_PULL_REQUEST: "None"
        continue-on-error: false

      - name: Upload artifact
        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce
        with:
          name: scan-fossology-report
          path: ./results

      - name: Artifact download
        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
        with:
          name: scan-fossology-report