Skip to content

Ensure hotrod image is published at the end of e2e test #9669

Ensure hotrod image is published at the end of e2e test

Ensure hotrod image is published at the end of e2e test #9669

Workflow file for this run

name: FOSSA
on:
push:
branches: [main]
pull_request:
branches: [main]
concurrency:
group: ${{ github.workflow }}-${{ (github.event.pull_request && github.event.pull_request.number) || github.ref || github.run_id }}
cancel-in-progress: true
# See https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
permissions:
contents: read
jobs:
fossa-license-scan:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
with:
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
with:
go-version: 1.22.x
- name: Add GOPATH
run: |
echo "GOPATH=$(go env GOPATH)"
echo "GOPATH=$(go env GOPATH)" >>"$GITHUB_ENV"
echo "$GOPATH/bin" >>"$GITHUB_PATH"
- name: Run FOSSA scan and upload report
uses: fossa-contrib/fossa-action@cdc5065bcdee31a32e47d4585df72d66e8e941c2 # v3.0.0
with:
# FOSSA Push-Only API Token
fossa-api-key: 304657e2357ba57b416b94e6b119131b
github-token: ${{ github.token }}