Skip to content

Regenerate third-party licenses on trunk pushes #11370

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
andyfeller merged 2 commits into from
Aug 1, 2025
Merged

Regenerate third-party licenses on trunk pushes #11370

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
99516d6
Regenerate third-party licenses on trunk pushes
andyfeller Jul 23, 2025
8037c61
Update permissions and events for workflow
andyfeller Aug 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 0 additions & 16 deletions .github/workflows/lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,15 +7,11 @@ on:
- "**.go"
- go.mod
- go.sum
- ".github/licenses.tmpl"
- "script/licenses*"
pull_request:
paths:
- "**.go"
- go.mod
- go.sum
- ".github/licenses.tmpl"
- "script/licenses*"
permissions:
contents: read
jobs:
Expand Down Expand Up @@ -50,18 +46,6 @@ jobs:
with:
version: v2.1.6

# actions/setup-go does not setup the installed toolchain to be preferred over the system install,
# which causes go-licenses to raise "Package ... does not have module info" errors.
# for more information, https://github.com/google/go-licenses/issues/244#issuecomment-1885098633
#
# go-licenses has been pinned for automation use.
- name: Check licenses
run: |
export GOROOT=$(go env GOROOT)
export PATH=${GOROOT}/bin:$PATH
go install github.com/google/go-licenses@5348b744d0983d85713295ea08a20cca1654a45e
make licenses-check

# Discover vulnerabilities within Go standard libraries used to build GitHub CLI using govulncheck.
govulncheck:
runs-on: ubuntu-latest
Expand Down
52 changes: 52 additions & 0 deletions .github/workflows/third-party-licenses.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@
name: Third Party Licenses
on:
push:
branches:
- trunk
paths:
- .github/licenses.tmpl
- .github/workflows/third-party-licenses.yml
- go.mod
- go.sum
- script/licenses*
jobs:
# This job is responsible for updating the third-party license reports and source code.
# It should be safe to cancel as the latest version of `go.mod` should be checked in.
regenerate-licenses:
runs-on: ubuntu-latest
concurrency:
group: ${{ github.workflow }}
cancel-in-progress: true
Comment thread
andyfeller marked this conversation as resolved.
permissions:
contents: write
steps:
- name: Check out code
uses: actions/checkout@v4
with:
ref: trunk

- name: Set up Go
uses: actions/setup-go@v5
with:
go-version-file: 'go.mod'

- name: Regenerate licenses
run: |
export GOROOT=$(go env GOROOT)
export PATH=${GOROOT}/bin:$PATH
Comment thread
andyfeller marked this conversation as resolved.
go install github.com/google/go-licenses@5348b744d0983d85713295ea08a20cca1654a45e
make licenses
git diff

- name: Commit and push changes
run: |
if git diff --exit-code; then
echo "No third-party license changes to commit"
else
git config --local user.name "github-actions[bot]"
git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
git add third-party third-party-licenses.*.md
git commit -m "Generate licenses - $GITHUB_SHA"
git pull
git push origin
Comment thread
andyfeller marked this conversation as resolved.
Comment thread
andyfeller marked this conversation as resolved.
fi
Loading