From a1a10042a1eff441fc4ed79e5f982beb4ddb3e56 Mon Sep 17 00:00:00 2001
From: Sarah Oloumi <sarah.oloumi@solace.com>
Date: Fri, 29 Nov 2024 09:36:20 -0500
Subject: [PATCH] Create Fossa Github Action

---
 .fossa.yml                        |  1 +
 .github/workflows/fossa-scan.yaml | 26 ++++++++++++++++++++++++++
 2 files changed, 27 insertions(+)
 create mode 100644 .fossa.yml
 create mode 100644 .github/workflows/fossa-scan.yaml

diff --git a/.fossa.yml b/.fossa.yml
new file mode 100644
index 000000000..0a70affa4
--- /dev/null
+++ b/.fossa.yml
@@ -0,0 +1 @@
+version: 3
diff --git a/.github/workflows/fossa-scan.yaml b/.github/workflows/fossa-scan.yaml
new file mode 100644
index 000000000..6da37e264
--- /dev/null
+++ b/.github/workflows/fossa-scan.yaml
@@ -0,0 +1,26 @@
+name: FOSSA Scan
+on:
+  pull_request:
+
+permissions:
+  repository-projects: read
+  contents: write
+  id-token: write
+  packages: write
+  actions: write
+
+jobs:
+  fossa_scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Install FOSSA CLI
+        run: |
+          curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash ;
+          export FOSSA_API_KEY=${{ secrets.FOSSA_API_KEY }};
+          fossa analyze --without-default-filters --debug --revision 1.0 --branch fossa-test --unpack-archives