Merge branch 'master' into add-notice-files-to-source-units #4939
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency scan | |
| on: [push] | |
| jobs: | |
| dependency-scan: | |
| name: dependency-scan | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Debugging information | |
| run: | | |
| ghc --version || echo "no ghc" | |
| cabal --version || echo "no cabal" | |
| ghcup --version || echo "no ghcup" | |
| - name: Update cabal cache for spectrometer run | |
| run: | | |
| cabal update | |
| - name: Install spectrometer from github | |
| run: | | |
| ./install-latest.sh -d | |
| - name: Use Spectrometer's GHC and Cabal | |
| # The first line works around a ghcup issue: | |
| # https://github.com/actions/runner-images/issues/7061#issuecomment-1422639889 | |
| run: | | |
| sudo chown -R $USER /usr/local/.ghcup | |
| ghcup install ghc 9.0.2 | |
| ghcup set ghc 9.0.2 | |
| ghcup install cabal 3.6.2.0 | |
| ghcup set cabal 3.6.2.0 | |
| cabal update | |
| - name: Run dependency scan on Spectrometer | |
| env: | |
| FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }} | |
| run: | | |
| fossa analyze --only-target cabal --only-target cargo | |
| - name: Check for scan results | |
| env: | |
| FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }} | |
| run: | | |
| fossa test |