license-audit.yml

name: Audit bugsnag-php dependency licenses

on: [push, pull_request]

jobs:
  license-audit:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v2

    - name: install PHP
      uses: shivammathur/setup-php@v2
      with:
        php-version: '8.2'
        coverage: none
        extensions: intl, mbstring

    - name: Fetch decisions.yml
      run: curl https://raw.githubusercontent.com/bugsnag/license-audit/master/config/decision_files/global.yml -o decisions.yml

    - name: Install composer dependencies
      run: composer install --no-dev

    - name: Run License Finder
      # for some reason license finder doesn't run without a login shell (-l)
      run: >
        docker run -v $PWD:/scan licensefinder/license_finder /bin/bash -lc "
          cd /scan &&
          license_finder --decisions-file decisions.yml --composer-check-require-only=true
        "