joeig/Go licenses check
Uses `github.com/google/go-licenses` to analyze the dependency tree of a Go package/binary.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| allowed-licenses | Comma-separated list of allowed license names. Can't be used in combination with `disallowed-types`. Supported license names: [github.com/google/licenseclassifier](https://github.com/google/licenseclassifier/blob/e6a9bb99b5a6f71d5a34336b8245e305f5430f99/license_type.go) | — | "" |
| application-version | The desired version of `github.com/google/go-licenses`. | — | v1.6.0 |
| confidence-threshold | Minimum confidence required in order to positively identify a license. | — | 0.9 |
| disallowed-types | Comma-separated list of disallowed license types. Can't be used in combination with `allowed_licenses`. Allowed values: `forbidden`, `notice`, `permissive`, `reciprocal`, `restricted`, `unencumbered`, `unknown` Supported license types: [github.com/google/licenseclassifier](https://github.com/google/licenseclassifier/blob/e6a9bb99b5a6f71d5a34336b8245e305f5430f99/license_type.go) | — | forbidden,unknown |
| ignore-packages | Comma-separated list of package path prefixes to be ignored. Dependencies from the ignored packages are still checked. | — | "" |
| include-tests | Include packages only imported by testing code. | — | true |
| package | The package to be checked. | — | ./... |
| working-directory | The working directory. | — | ./ |
Outputs
no outputs