Added licence scan #98

2025-08-21T18:59:08Z

andyloughran commented

2025-08-21 18:59:08 +00:00

(Migrated from github.com)

Add the new fossology github action.

github-advanced-security[bot] (Migrated from github.com) reviewed

2025-08-21 18:59:42 +00:00

.github/workflows/licence-scan.yml

					
				@ -0,0 +1,19 @@

				name: License scan on PR

Ensure top-level permissions are not set to write-all

Show more details

## Ensure top-level permissions are not set to write-all Ensure top-level permissions are not set to write-all [Show more details](https://github.com/andylockran/spectral-aws-apigateway-ruleset/security/code-scanning/18)

github-advanced-security[bot] (Migrated from github.com) reviewed

2025-08-21 18:59:59 +00:00

.github/workflows/licence-scan.yml

					
				@ -0,0 +16,4 @@

				      with:

				        scan_mode: ''

				        scanners: 'nomos ojo'

				        report_format: 'SPDX_JSON'

Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}}

Show more details

## Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{contents: read}} [Show more details](https://github.com/andylockran/spectral-aws-apigateway-ruleset/security/code-scanning/19)

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "fix/add-scanners:fix/add-scanners"

git switch "fix/add-scanners"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"

git merge --no-ff "fix/add-scanners"

git switch "fix/add-scanners"

git rebase "main"

git switch "main"

git merge --ff-only "fix/add-scanners"

git switch "fix/add-scanners"

git rebase "main"

git switch "main"

git merge --no-ff "fix/add-scanners"

git switch "main"

git merge --squash "fix/add-scanners"