go-mail/.github/workflows/reuse.yml

# SPDX-FileCopyrightText: 2022 Winni Neessen <winni@neessen.dev>
#
# SPDX-License-Identifier: CC0-1.0

name: REUSE Compliance Check

on: [push, pull_request]

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    steps: 
    - name: Harden Runner
      uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
      with:
        egress-policy: audit

    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
    - name: REUSE Compliance Check
      uses: fsfe/reuse-action@a46482ca367aef4454a87620aa37c2be4b2f8106 # v3.0.0
Create reuse.yml 2022-06-17 15:22:53 +02:00			`# SPDX-FileCopyrightText: 2022 Winni Neessen <winni@neessen.dev>`
			`#`
			`# SPDX-License-Identifier: CC0-1.0`

			`name: REUSE Compliance Check`
Update reuse.yml 2022-06-17 15:27:07 +02:00
			`on: [push, pull_request]`

Add read permissions to GitHub workflow files This commit adds read permissions for 'contents' in the GitHub workflow files sonarqube.yml and reuse.yml. This allows these specific workflows to access the relevant contents they need for execution. 2024-03-23 15:49:03 +01:00			`permissions:`
			`contents: read`

Update reuse.yml 2022-06-17 15:27:07 +02:00			`jobs:`
			`test:`
			`runs-on: ubuntu-latest`
			`steps:`
[StepSecurity] Apply security best practices Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> 2024-03-22 15:36:47 +01:00			`- name: Harden Runner`
			`uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0`
			`with:`
			`egress-policy: audit`

			`- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0`
Update reuse.yml 2022-06-17 15:27:07 +02:00			`- name: REUSE Compliance Check`
Bump fsfe/reuse-action from 1.3.0 to 3.0.0 Bumps [fsfe/reuse-action](https://github.com/fsfe/reuse-action) from 1.3.0 to 3.0.0. - [Release notes](https://github.com/fsfe/reuse-action/releases) - [Commits](https://github.com/fsfe/reuse-action/compare/28cf8f33bc50f4c306f52e38fe3826717dea63dc...a46482ca367aef4454a87620aa37c2be4b2f8106) --- updated-dependencies: - dependency-name: fsfe/reuse-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> 2024-03-25 14:45:29 +01:00			`uses: fsfe/reuse-action@a46482ca367aef4454a87620aa37c2be4b2f8106 # v3.0.0`