maibornwolff/License Policy Check
The SBOM passed to the action is analyzed. If non-compliant licenses are found, the pipeline breaks optionally.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 9, 2026
- License
- Apache 2.0
Pinned Snippet
uses: maibornwolff/purl-patrol@7d1eb703de44cd8961c4e4d321670567d523ae3c # v1.6.6tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| SBOM_PATH | Path to the SBOM | yes | — |
| LICENSE_POLICY_PATH | Path to a custom license policy in a format compliant with sbom-utility. | no | — |
| BREAK_ENABLED | Boolean value whether to break the pipeline in case of non-compliance. | no | — |
| IGNORE_PKG_TYPES | Comma-separated list of package types to be ignored | no | — |
Outputs
no outputs