fosso

Signed-off-by: Anas Nashif <anas.nashif@intel.com>

Author: nashif

.github/workflows/foss.yml

@@ -0,0 +1,57 @@
+name: FOSSology Zephyr + west modules
+
+on:
+  push:
+    branches:
+      - main
+      - v*-branch
+      - collab-*
+
+permissions:
+  contents: read
+
+jobs:
+  fossology:
+    runs-on:
+      group: zephyr-runner-v2-linux-x64-4xlarge
+    container:
+      image: ghcr.io/zephyrproject-rtos/ci-repo-cache:v0.29.2.20260422
+      options: '--entrypoint /bin/bash'
+    strategy:
+      fail-fast: false
+    timeout-minutes: 1440
+
+    steps:
+      - name: Checkout Zephyr
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          path: workspace/zephyr
+          fetch-depth: 1
+
+      - name: Initialize and update west modules
+        working-directory: workspace
+        run: |
+          west init -l zephyr
+          west config --global update.narrow true
+          west update
+
+      - name: Show workspace contents
+        working-directory: workspace
+        run: |
+          west list
+          find . -maxdepth 2 -type d | sort
+
+      - name: FOSSology scan of Zephyr + west modules
+        uses: fossology/fossology-action@v1
+        with:
+          scan_mode: scan-dir
+          scan_dir: workspace
+          scanners: "nomos ojo copyright keyword"
+          report_format: SPDX_JSON
+
+      - name: Upload FOSSology results
+        if: success() || failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: fossology-zephyr-west-results
+          path: results/