Merge pull request devspace-sh#2815 from devspace-sh/feat/oss_license…

…_checker

feat(ci): add License checker bot

.github/licenses.tmpl

@@ -0,0 +1,18 @@
+---
+title: Open Source Licenses
+sidebar_label: OSS Licenses
+---
+
+# devspace dependencies
+
+The following open source dependencies are used to build [devspace][].
+
+[devspace]: https://www.devspace.sh
+
+## Go Packages
+
+Some packages may only be included on certain architectures or operating systems.
+
+{{ range . }}
+ - [{{.Name}}](https://pkg.go.dev/{{.Name}}) ([{{.LicenseName}}]({{.LicenseURL}}))
+{{- end }}

.github/workflows/go-licenses.yaml

@@ -0,0 +1,53 @@
+name: go-licenses
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - .github/licenses.tmpl
+      - .github/workflows/go-licenses.yaml
+      - go.mod
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  update-licenses:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version-file: go.mod
+
+      - name: Install go-licenses
+        run: |
+          go install github.com/google/[email protected]
+      - name: Run go-licenses
+        run: go-licenses report ./... > docs/pages/licenses/devspace.mdx --template .github/licenses.tmpl --ignore github.com/loft-sh
+
+      - name: Check invalid licenses
+        run: |
+          if cat licenses/devspace.mdx | grep '^ - ' | grep -Evi "apache|bsd|mit|isc|python|postgre|x11|zlib"; then
+            echo "ERR: Found invalid licenses!"
+            exit 1
+          fi
+
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@v5
+        with:
+          token: ${{ secrets.GH_ACCESS_TOKEN }}
+          committer: Loft Bot <[email protected]>
+          branch: licenses/devspace
+          commit-message: "license(devspace): Updated OSS licenses"
+          title: "license(devspace): Updated OSS licenses"
+          body: Triggered by ${{ github.repository }}@${{ github.sha }}
+          signoff: true
+          delete-branch: true