aboutsummaryrefslogtreecommitdiff
path: root/.github
diff options
context:
space:
mode:
authorGravatar Abhinav Gupta <abg@uber.com> 2021-05-25 14:45:43 -0700
committerGravatar Abhinav Gupta <abg@uber.com> 2021-05-25 14:45:43 -0700
commit948c76b6a5fd3c72c32a8e4e243e4836335d4743 (patch)
treea9ede57902dd759d33a1ac05f614ed1a3aef7857 /.github
parent534a46db746fd42af3b62ec1a039c04c6f7bee65 (diff)
downloadsally-948c76b6a5fd3c72c32a8e4e243e4836335d4743.tar.gz
sally-948c76b6a5fd3c72c32a8e4e243e4836335d4743.tar.zst
sally-948c76b6a5fd3c72c32a8e4e243e4836335d4743.zip
fossa: Run separately, only on push
FOSSA analysis currently blocks CI on pull requests because they are denied access to secrets. Run FOSSA as a separate job only when we push to a branch of the project.
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/fossa.yaml17
-rw-r--r--.github/workflows/go.yml5
2 files changed, 17 insertions, 5 deletions
diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
new file mode 100644
index 0000000..86e6db7
--- /dev/null
+++ b/.github/workflows/fossa.yaml
@@ -0,0 +1,17 @@
+name: FOSSA Analysis
+on: push
+
+jobs:
+
+ build:
+ runs-on: ubuntu-latest
+ if: github.repository_owner == 'uber-go'
+ steps:
+ - name: Checkout code
+ uses: actions/checkout@v2
+
+ - name: FOSSA analysis
+ uses: fossas/fossa-action@v1
+ with:
+ api-key: ${{ secrets.FOSSA_API_KEY }}
+
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 814b126..098a907 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -27,11 +27,6 @@ jobs:
- name: Checkout code
uses: actions/checkout@v2
- - name: FOSSA analysis
- uses: fossas/fossa-action@v1
- with:
- api-key: ${{ secrets.FOSSA_API_KEY }}
-
- name: Load cached dependencies
uses: actions/cache@v1
with: