Adding some basic license scanning.

Author: elliotcourant

.github/workflows/go.yml

@@ -30,10 +30,8 @@ jobs:
           --health-retries 5
     steps:
       - uses: actions/checkout@v2
-      - name: Dependencies
-        run: make dependencies
-      - name: Build
-        run: make build
+      - name: Depdendencies, Build, Licenses
+        run: make license
       - name: Setup Schema
         run: make apply-schema-ci
       - name: Test

Makefile

@@ -21,12 +21,12 @@ ifndef POSTGRES_HOST
 POSTGRES_HOST=localhost
 endif
 
-default: dependencies build test
+default: build test
 
-dependencies:
+dependencies: go.mod go.sum
 	go get ./...
 
-build:
+build: dependencies $(wildcard $(PWD)/pkg/**/*.go)
 	go build -o $(LOCAL_BIN_DIR)/monetr $(MONETR_CLI_PACKAGE)
 
 test:

Makefile.local

@@ -13,6 +13,7 @@ JQ=$(LOCAL_BIN)/jq
 KUBECTL=minikube kubectl --
 SPLIT_YAML=kubernetes-split-yaml
 YQ=$(LOCAL_BIN)/yq
+LICENSE=$(LOCAL_BIN)/golicense
 VAULT=vault
 MKCERT=mkcert
 PGO=$(LOCAL_BIN)/pgo
@@ -267,6 +268,18 @@ install-$(YQ): $(LOCAL_BIN) $(LOCAL_TMP)
 	mv $(YQ_DIR)/yq_$(OS)_$(ARCH) $(YQ)
 	rm -rf $(YQ_DIR) || true
 
+$(LICENSE):
+	@if [ ! -f "$(LICENSE)" ]; then make install-$(LICENSE); fi
+
+LICENSE_REPO=https://github.com/mitchellh/golicense.git
+LICENSE_TMP=$(LOCAL_TMP)/golicense
+install-$(LICENSE): $(LOCAL_BIN) $(LOCAL_TMP)
+	$(call infoMsg,Installing golicense to $(LICENSE))
+	rm -rf $(LICENSE_TMP) || true
+	git clone $(LICENSE_REPO) $(LICENSE_TMP)
+	cd $(LICENSE_TMP) && go build -o $(LICENSE) .
+	rm -rf $(LICENSE_TMP) || true
+
 
 MKCERT_REPO=https://github.com/FiloSottile/mkcert
 MKCERT_DIR=$(LOCAL_TMP)/$(MKCERT)
@@ -542,4 +555,8 @@ mail-mini: $(VALUES) $(YQ)
 	@echo "mailhog is now accessible at: https://mail.$(LOCAL_DOMAIN)"
 	@echo "\033[0;31m#################################################################################\033[0m"
 
+license: $(LICENSE) build
+	- $(LICENSE) $(PWD)/licenses.hcl $(LOCAL_BIN)/monetr
+
+
 

licenses.hcl

@@ -0,0 +1,9 @@
+allow = [
+  "Apache-2.0",
+  "BSD-2-Clause",
+  "BSD-3-Clause",
+  "MIT",
+  "MPL-2.0",
+  "Unlicense",
+]
+deny = []