ci: add license verification workflow (#23)

Signed-off-by: Davanum Srinivas <dsrinivas@nvidia.com>

Author: dims

.github/actions/load-versions/action.yml

@@ -34,6 +34,9 @@ outputs:
   addlicense:
     description: 'addlicense version'
     value: ${{ steps.versions.outputs.addlicense }}
+  go_licenses:
+    description: 'go-licenses version'
+    value: ${{ steps.versions.outputs.go_licenses }}
   kind:
     description: 'Kind version'
     value: ${{ steps.versions.outputs.kind }}
@@ -75,6 +78,7 @@ runs:
         echo "golangci_lint=$(yq eval '.linting.golangci_lint' .versions.yaml)" >> $GITHUB_OUTPUT
         echo "yamllint=$(yq eval '.linting.yamllint' .versions.yaml)" >> $GITHUB_OUTPUT
         echo "addlicense=$(yq eval '.linting.addlicense' .versions.yaml)" >> $GITHUB_OUTPUT
+        echo "go_licenses=$(yq eval '.linting.go_licenses' .versions.yaml)" >> $GITHUB_OUTPUT
 
         # Security tools
         echo "grype=$(yq eval '.security_tools.grype' .versions.yaml)" >> $GITHUB_OUTPUT
@@ -97,6 +101,7 @@ runs:
         echo "  golangci_lint: ${{ steps.versions.outputs.golangci_lint }}"
         echo "  yamllint: ${{ steps.versions.outputs.yamllint }}"
         echo "  addlicense: ${{ steps.versions.outputs.addlicense }}"
+        echo "  go_licenses: ${{ steps.versions.outputs.go_licenses }}"
         echo "  grype: ${{ steps.versions.outputs.grype }}"
         echo "  kubectl: ${{ steps.versions.outputs.kubectl }}"
         echo "  kind: ${{ steps.versions.outputs.kind }}"

.github/workflows/verify-licenses.yaml

@@ -20,11 +20,13 @@ on:
     paths:
       - 'go.mod'
       - 'go.sum'
+      - '.github/workflows/verify-licenses.yaml'
   pull_request:
     branches: [main]
     paths:
       - 'go.mod'
       - 'go.sum'
+      - '.github/workflows/verify-licenses.yaml'
   workflow_dispatch: {}
 
 permissions:
@@ -43,14 +45,18 @@ jobs:
       - name: Checkout Code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Load versions
+        id: versions
+        uses: ./.github/actions/load-versions
+
       - name: Setup Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+        uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
-          go-version-file: go.mod
+          go-version: ${{ steps.versions.outputs.go }}
           cache: true
 
       - name: Install go-licenses
-        run: go install github.com/google/go-licenses@latest
+        run: go install github.com/google/go-licenses@${{ steps.versions.outputs.go_licenses }}
 
       - name: Report licenses
         run: |

.versions.yaml

@@ -28,6 +28,7 @@ linting:
   golangci_lint: 'v2.6.2'
   yamllint: '1.35.0'
   addlicense: 'v1.1.1'
+  go_licenses: 'v1.6.0'
 
 # Security Tools
 security_tools: