|
| 1 | +# Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/check-license.md |
| 2 | +name: Check License |
| 3 | + |
| 4 | +env: |
| 5 | + EXPECTED_LICENSE_FILENAME: LICENSE.txt |
| 6 | + # SPDX identifier: https://spdx.org/licenses/ |
| 7 | + EXPECTED_LICENSE_TYPE: AGPL-3.0 |
| 8 | + |
| 9 | +# See: https://docs.github.com/actions/using-workflows/events-that-trigger-workflows |
| 10 | +on: |
| 11 | + create: |
| 12 | + push: |
| 13 | + paths: |
| 14 | + - ".github/workflows/check-license.ya?ml" |
| 15 | + # See: https://github.com/licensee/licensee/blob/master/docs/what-we-look-at.md#detecting-the-license-file |
| 16 | + - "[cC][oO][pP][yY][iI][nN][gG]*" |
| 17 | + - "[cC][oO][pP][yY][rR][iI][gG][hH][tH]*" |
| 18 | + - "[lL][iI][cC][eE][nN][cCsS][eE]*" |
| 19 | + - "[oO][fF][lL]*" |
| 20 | + - "[pP][aA][tT][eE][nN][tT][sS]*" |
| 21 | + pull_request: |
| 22 | + paths: |
| 23 | + - ".github/workflows/check-license.ya?ml" |
| 24 | + - "[cC][oO][pP][yY][iI][nN][gG]*" |
| 25 | + - "[cC][oO][pP][yY][rR][iI][gG][hH][tH]*" |
| 26 | + - "[lL][iI][cC][eE][nN][cCsS][eE]*" |
| 27 | + - "[oO][fF][lL]*" |
| 28 | + - "[pP][aA][tT][eE][nN][tT][sS]*" |
| 29 | + schedule: |
| 30 | + # Run periodically to catch breakage caused by external changes. |
| 31 | + - cron: "0 6 * * WED" |
| 32 | + workflow_dispatch: |
| 33 | + repository_dispatch: |
| 34 | + |
| 35 | +jobs: |
| 36 | + run-determination: |
| 37 | + runs-on: ubuntu-latest |
| 38 | + permissions: {} |
| 39 | + outputs: |
| 40 | + result: ${{ steps.determination.outputs.result }} |
| 41 | + steps: |
| 42 | + - name: Determine if the rest of the workflow should run |
| 43 | + id: determination |
| 44 | + run: | |
| 45 | + RELEASE_BRANCH_REGEX="refs/heads/[0-9]+.[0-9]+.x" |
| 46 | + # The `create` event trigger doesn't support `branches` filters, so it's necessary to use Bash instead. |
| 47 | + if [[ |
| 48 | + "${{ github.event_name }}" != "create" || |
| 49 | + "${{ github.ref }}" =~ $RELEASE_BRANCH_REGEX |
| 50 | + ]]; then |
| 51 | + # Run the other jobs. |
| 52 | + RESULT="true" |
| 53 | + else |
| 54 | + # There is no need to run the other jobs. |
| 55 | + RESULT="false" |
| 56 | + fi |
| 57 | +
|
| 58 | + echo "result=$RESULT" >> $GITHUB_OUTPUT |
| 59 | +
|
| 60 | + check-license: |
| 61 | + needs: run-determination |
| 62 | + if: needs.run-determination.outputs.result == 'true' |
| 63 | + runs-on: ubuntu-latest |
| 64 | + permissions: |
| 65 | + contents: read |
| 66 | + |
| 67 | + steps: |
| 68 | + - name: Checkout repository |
| 69 | + uses: actions/checkout@v3 |
| 70 | + |
| 71 | + - name: Install Ruby |
| 72 | + uses: ruby/setup-ruby@v1 |
| 73 | + with: |
| 74 | + ruby-version: ruby # Install latest version |
| 75 | + |
| 76 | + - name: Install licensee |
| 77 | + run: gem install licensee |
| 78 | + |
| 79 | + - name: Check license file |
| 80 | + run: | |
| 81 | + EXIT_STATUS=0 |
| 82 | + # See: https://github.com/licensee/licensee |
| 83 | + LICENSEE_OUTPUT="$(licensee detect --json --confidence=100)" |
| 84 | +
|
| 85 | + DETECTED_LICENSE_FILE="$(echo "$LICENSEE_OUTPUT" | jq .matched_files[0].filename | tr --delete '\r')" |
| 86 | + echo "Detected license file: $DETECTED_LICENSE_FILE" |
| 87 | + if [ "$DETECTED_LICENSE_FILE" != "\"${EXPECTED_LICENSE_FILENAME}\"" ]; then |
| 88 | + echo "::error file=${DETECTED_LICENSE_FILE}::detected license file $DETECTED_LICENSE_FILE doesn't match expected: $EXPECTED_LICENSE_FILENAME" |
| 89 | + EXIT_STATUS=1 |
| 90 | + fi |
| 91 | +
|
| 92 | + DETECTED_LICENSE_TYPE="$(echo "$LICENSEE_OUTPUT" | jq .matched_files[0].matched_license | tr --delete '\r')" |
| 93 | + echo "Detected license type: $DETECTED_LICENSE_TYPE" |
| 94 | + if [ "$DETECTED_LICENSE_TYPE" != "\"${EXPECTED_LICENSE_TYPE}\"" ]; then |
| 95 | + echo "::error file=${DETECTED_LICENSE_FILE}::detected license type $DETECTED_LICENSE_TYPE doesn't match expected \"${EXPECTED_LICENSE_TYPE}\"" |
| 96 | + EXIT_STATUS=1 |
| 97 | + fi |
| 98 | +
|
| 99 | + exit $EXIT_STATUS |
0 commit comments