Add Licensed To Help Verify Prod Licenses (#128)

* Add Licensed Workflow and config * manual validation of dependencies * Ignore Generated Files in Git PR's * update contributing.md
actions · Sep 23, 2020 · b9436a7 · b9436a7 · joshuaspies · Jun 16, 2021
1 parent 51d2bf1
commit b9436a7
Show file tree

Hide file tree

Showing 15 changed files with 320 additions and 167 deletions.
diff --git a/.gitattributes b/.gitattributes
@@ -1 +1,2 @@
-* text=auto eol=lf
+* text=auto eol=lf
+.licenses/** -diff linguist-generated=true
diff --git a/.github/workflows/licensed.yml b/.github/workflows/licensed.yml
@@ -0,0 +1,20 @@
+name: Licensed
+
+on:
+  push: {branches: main}
+  pull_request: {branches: main}
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    name: Check licenses
+    steps:
+      - uses: actions/checkout@v2
+      - run: npm ci
+      - name: Install licensed
+        run: |
+          cd $RUNNER_TEMP
+          curl -Lfs -o licensed.tar.gz https://github.com/github/licensed/releases/download/2.12.2/licensed-2.12.2-linux-x64.tar.gz
+          sudo tar -xzf licensed.tar.gz
+          sudo mv licensed /usr/local/bin/licensed
+      - run: licensed status
diff --git a/.licensed.yml b/.licensed.yml
@@ -0,0 +1,14 @@
+sources:
+  npm: true
+
+allowed:
+  - apache-2.0
+  - bsd-2-clause
+  - bsd-3-clause
+  - isc
+  - mit
+  - cc0-1.0
+  - unlicense
+
+reviewed:
+  npm:
diff --git a/.licenses/npm/@actions/core.dep.yml b/.licenses/npm/@actions/core.dep.yml
diff --git a/.licenses/npm/@actions/exec.dep.yml b/.licenses/npm/@actions/exec.dep.yml
diff --git a/.licenses/npm/@actions/http-client.dep.yml b/.licenses/npm/@actions/http-client.dep.yml
diff --git a/.licenses/npm/@actions/io.dep.yml b/.licenses/npm/@actions/io.dep.yml
diff --git a/.licenses/npm/@actions/tool-cache.dep.yml b/.licenses/npm/@actions/tool-cache.dep.yml
diff --git a/.licenses/npm/semver-6.3.0.dep.yml b/.licenses/npm/semver-6.3.0.dep.yml
diff --git a/.licenses/npm/semver-7.1.3.dep.yml b/.licenses/npm/semver-7.1.3.dep.yml
diff --git a/.licenses/npm/tunnel.dep.yml b/.licenses/npm/tunnel.dep.yml
diff --git a/.licenses/npm/uuid.dep.yml b/.licenses/npm/uuid.dep.yml