licensed.yml

# SPDX-License-Identifier: MIT
name: Licensed

on:
  push:
    branches:
    - main
    - feature/**
    paths:
    - .github/workflows/licensed.yml
    - .licensed.yml
    - .licenses/**
    - package-lock.json
    - package.json

jobs:
  licensed:
    name: Check licenses
    runs-on: ubuntu-24.04
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: Setup ruby
      uses: ruby/setup-ruby@v1
      with:
        ruby-version: ruby

    - name: Setup Licensed
      uses: github/setup-licensed@v1
      with:
        github_token: '${{ secrets.GITHUB_TOKEN }}'
        version: '4.x'

    - name: Setup Node.js
      uses: actions/setup-node@v4
      with:
        node-version: 16.x

    - uses: actions/cache@v4
      with:
        path: ~/.npm
        key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
        restore-keys: |
          ${{ runner.os }}-node-

    - name: Install packages
      run: |
        npm ci

    - name: Check licensed status
      run: |
        licensed status