diff --git a/.github/workflows/enforce-license-compliance.yml b/.github/workflows/enforce-license-compliance.yml index 619477f..79e013b 100644 --- a/.github/workflows/enforce-license-compliance.yml +++ b/.github/workflows/enforce-license-compliance.yml @@ -1,38 +1,14 @@ name: Enforce License Compliance on: push: branches: [master] pull_request: branches: [master] jobs: enforce-license-compliance: - if: github.repository_owner == 'getsentry' runs-on: ubuntu-latest steps: - - name: 'Fetch FOSSA_API_KEY' - id: fetch_key - run: | - - # We can't use GitHub Secrets for this key because we want it to be - # available in forks. This is a push-only key for a low-privilege - # account, so it is safe (enough) to expose publicly. This is a hack - # to set it in one place in case we ever do need to roll it. 🤷 - - curl -O https://raw.githubusercontent.com/getsentry/.github/main/.github/workflows/FOSSA_API_KEY - echo "::set-output name=key::$(cat FOSSA_API_KEY | grep -v '#')" - - - name: 'Checkout Code' - uses: actions/checkout@v2 - - - name: 'Run FOSSA Scan' - uses: fossas/fossa-action@v1.1.0 - with: - api-key: ${{ steps.fetch_key.outputs.key }} - - - name: 'Run FOSSA Test' - uses: fossas/fossa-action@v1.1.0 - with: - api-key: ${{ steps.fetch_key.outputs.key }} - run-tests: true + - name: 'Enforce License Compliance' + uses: getsentry/action-enforce-license-compliance@main