gmsm/.github/workflows/licenses.yml
StepSecurity Bot 32564db705
[StepSecurity] Apply security best practices
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2025-06-23 03:13:12 +00:00

30 lines
831 B
YAML

name: Update License File
on:
push:
branches: [ main ]
paths:
- 'go.mod'
- 'go.sum'
permissions:
contents: read
jobs:
update-licenses:
runs-on: ubuntu-latest
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
with:
egress-policy: audit
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
with:
go-version: '1.23'
- name: Install go-licenses
run: go install github.com/google/go-licenses@latest
- name: Generate license files
run: |
go-licenses report github.com/emmansun/gmsm > third-party-licenses.md