fossology-check.yml

name: Fossology check
on: [push, pull_request]

permissions:
  contents: read

jobs:
  fossology:
    runs-on: ubuntu-latest
    
    container:
      image: fossology/fossology:scanner

    steps:
      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9

      - name: Fossology run
        run: |
          export GITHUB_TOKEN=${{secrets.GITHUB_TOKEN}}
          export GITHUB_PULL_REQUEST="None"
          /bin/fossologyscanner repo nomos ojo copyright keyword
        continue-on-error: true

      - name: Upload artifact
        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce
        with:
          name: scan-fossology-report
          path: ./results

      - name: Artifact download
        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
        with:
          name: scan-fossology-report