gmsm/.github/workflows/licenses.yml
dependabot[bot] 3e079e2ec3
build(deps): bump actions/checkout from 4.2.2 to 5.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11bd71901b...08c6903cd8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 10:01:21 +00:00

30 lines
836 B
YAML

name: Update License File
on:
push:
branches: [ "develop" ]
paths:
- 'go.mod'
- 'go.sum'
permissions:
contents: read
jobs:
update-licenses:
runs-on: ubuntu-latest
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
with:
egress-policy: audit
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
with:
go-version: '1.23'
- name: Install go-licenses
run: go install github.com/google/go-licenses@latest
- name: Generate license files
run: |
go-licenses report github.com/emmansun/gmsm > third-party-licenses.md