fossa.yml

name: fossa
on:
  push:
    branches:
      - master
      - v*
    tags:
      - v*
  pull_request:
    branches:
      - master
      - v*
  workflow_dispatch: {}

permissions: {}

jobs:
  fossa-scan:
    if: github.repository == 'longhorn/longhorn-share-manager' # FOSSA is not intended to run on forks.
    runs-on: ubuntu-latest
    permissions:
      contents: read
    env:
      FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }}
    steps:
      - name: "Checkout code"
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

      - name: "Run FOSSA Scan"
        uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # v1.9.0 # Use a specific version if locking is preferred
        with:
          api-key: ${{ secrets.FOSSA_API_KEY }}
          project: longhorn-share-manager