curl/.github/workflows/reuse.yml

# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
# SPDX-FileCopyrightText: 2022 Free Software Foundation Europe e.V. <https://fsfe.org>
#
# SPDX-License-Identifier: curl

name: REUSE compliance

on:
  push:
    branches:
      - master
      - '*/ci'
  pull_request:
    branches:
      - master

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: true

permissions: {}

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
      - name: REUSE Compliance Check
        uses: fsfe/reuse-action@a46482ca367aef4454a87620aa37c2be4b2f8106 # v3
copyright: update all copyright lines and remove year ranges - they are mostly pointless in all major jurisdictions - many big corporations and projects already don't use them - saves us from pointless churn - git keeps history for us - the year range is kept in COPYING checksrc is updated to allow non-year using copyright statements Closes #10205 2023-01-02 20:51:48 +08:00			`# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.`
copyright: make repository REUSE compliant Add licensing and copyright information for all files in this repository. This either happens in the file itself as a comment header or in the file `.reuse/dep5`. This commit also adds a Github workflow to check pull requests and adapts copyright.pl to the changes. Closes #8869 2022-05-17 17:16:50 +08:00			`# SPDX-FileCopyrightText: 2022 Free Software Foundation Europe e.V. <https://fsfe.org>`
			`#`
			`# SPDX-License-Identifier: curl`

GHA: shorten the reuse CI job name "REUSE compliance / check" should be good enough Closes #9000 2022-06-13 16:03:04 +08:00			`name: REUSE compliance`
copyright: make repository REUSE compliant Add licensing and copyright information for all files in this repository. This either happens in the file itself as a comment header or in the file `.reuse/dep5`. This commit also adds a Github workflow to check pull requests and adapts copyright.pl to the changes. Closes #8869 2022-05-17 17:16:50 +08:00
			`on:`
			`push:`
			`branches:`
tidy-up: fix yamllint whitespace issues Closes #12466 2023-12-06 18:05:20 +08:00			`- master`
			`- '*/ci'`
copyright: make repository REUSE compliant Add licensing and copyright information for all files in this repository. This either happens in the file itself as a comment header or in the file `.reuse/dep5`. This commit also adds a Github workflow to check pull requests and adapts copyright.pl to the changes. Closes #8869 2022-05-17 17:16:50 +08:00			`pull_request:`
			`branches:`
tidy-up: fix yamllint whitespace issues Closes #12466 2023-12-06 18:05:20 +08:00			`- master`
copyright: make repository REUSE compliant Add licensing and copyright information for all files in this repository. This either happens in the file itself as a comment header or in the file `.reuse/dep5`. This commit also adds a Github workflow to check pull requests and adapts copyright.pl to the changes. Closes #8869 2022-05-17 17:16:50 +08:00
CI/GHA: cancel outdated CI runs on new PR changes Avoid letting outdated CI runs continue if a PR receives new changes. Outside a PR we let them continue running by tying the concurrency to the commit hash instead. Also only let one CodeQL or Hacktoberfest job run at a time. Other CI platforms we use have this build in, but GitHub unfortunately neither by default nor with a simple option. This saves CI resources and therefore a little energy. Approved-by: Daniel Stenberg Approved-by: Max Dymond Closes #9533 2022-09-18 05:45:32 +08:00			`concurrency:`
			`group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.sha }}`
			`cancel-in-progress: true`

GHA: clarify workflows permissions, set least possible privilege Set top-level permissions to None on all workflows, setting per-job permissions. This avoids that new jobs inherit unwanted permissions. Discussion: https://curl.se/mail/lib-2022-11/0028.html Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com> Closes #9928 2022-11-16 22:55:33 +08:00			`permissions: {}`

copyright: make repository REUSE compliant Add licensing and copyright information for all files in this repository. This either happens in the file itself as a comment header or in the file `.reuse/dep5`. This commit also adds a Github workflow to check pull requests and adapts copyright.pl to the changes. Closes #8869 2022-05-17 17:16:50 +08:00			`jobs:`
GHA: shorten the reuse CI job name "REUSE compliance / check" should be good enough Closes #9000 2022-06-13 16:03:04 +08:00			`check:`
copyright: make repository REUSE compliant Add licensing and copyright information for all files in this repository. This either happens in the file itself as a comment header or in the file `.reuse/dep5`. This commit also adds a Github workflow to check pull requests and adapts copyright.pl to the changes. Closes #8869 2022-05-17 17:16:50 +08:00			`runs-on: ubuntu-latest`
			`steps:`
GHA: bump actions/checkout from 4.1.4 to 4.1.6 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.4 to 4.1.6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/0ad4b8fadaa221de15dcec353f45205ec38ea70b...a5ac7e51b41094c92402da3b24376905380afc29) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Closes #13720 2024-05-20 22:25:03 +08:00			`- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4`
tidy-up: fix yamllint whitespace issues Closes #12466 2023-12-06 18:05:20 +08:00			`- name: REUSE Compliance Check`
GHA: pin dependencies Closes #13628 2024-05-15 17:39:30 +08:00			`uses: fsfe/reuse-action@a46482ca367aef4454a87620aa37c2be4b2f8106 # v3`