chore(deps): Update GitHub Actions #468
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # REUSE Compliance Check for RAG Processor | |
| # Validates REUSE 3.0 specification compliance for license management | |
| # | |
| # REUSE helps with clear licensing by using SPDX headers | |
| # Documentation: https://reuse.software/ | |
| name: REUSE Compliance | |
| on: | |
| merge_group: | |
| pull_request: | |
| push: | |
| branches: | |
| - main | |
| - master | |
| - develop | |
| permissions: read-all | |
| jobs: | |
| reuse: | |
| name: Check REUSE Compliance | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Harden runner | |
| uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout repository | |
| uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 | |
| - name: REUSE Compliance Check | |
| uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0 | |
| - name: Generate REUSE SPDX | |
| if: success() | |
| run: | | |
| docker run --rm --volume $(pwd):/data \ | |
| fsfe/reuse:6.2.0@sha256:85462a75c0f8efda09ddd190b92816b70e7662577c8427429e11e1b9f25a992e \ | |
| spdx --output /data/reuse-spdx.json | |
| - name: Upload REUSE SPDX | |
| if: success() | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: reuse-spdx | |
| path: reuse-spdx.json | |
| retention-days: 90 | |
| validate-licenses: | |
| name: Validate License Files | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - name: Harden runner | |
| uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout repository | |
| uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 | |
| - name: Check primary license exists | |
| run: | | |
| if [ ! -f "LICENSES/MIT.txt" ]; then | |
| echo "Warning: MIT.txt not found in LICENSES/" | |
| echo "You may need to download it from https://spdx.org/licenses/" | |
| fi | |
| - name: Verify REUSE.toml exists | |
| run: | | |
| if [ ! -f "REUSE.toml" ]; then | |
| echo "Error: REUSE.toml missing from repository root" | |
| exit 1 | |
| fi |