ci : update license scan (#648)

* Update license_scan.yml * Delete .github/license_scan_config.yml
sovity · Jan 26, 2024 · 63f08bc · 63f08bc
1 parent 0d063ed
commit 63f08bc
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 17 deletions.
diff --git a/.github/license_scan_config.yml b/.github/license_scan_config.yml
diff --git a/.github/workflows/license_scan.yml b/.github/workflows/license_scan.yml
@@ -1,12 +1,11 @@
 name: Trivy License Scan
 
 on:
-  pull_request:
-    branches: ["main"]
+  push:
 
 jobs:
-  license_scan:
-    name: license_scan
+  license_scan1:
+    name: License scan (rootfs)
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
@@ -21,3 +20,18 @@ jobs:
           scanners: "license"
           severity: "CRITICAL,HIGH"
           exit-code: 1
+  license_scan2:
+    name: License scan (repo)
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Run license scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: "repo"
+          scan-ref: "."
+          scanners: "license"
+          severity: "CRITICAL,HIGH"
+          exit-code: 1