search

Samsung / LPVS

License Pre-Validation Service analyzes which open source components and licenses are used in every patch. It returns the list of restricted licenses and the possibility of license violation on the comment with the exact code location and the open source component information.
https://samsung.github.io/LPVS/
MIT License
24 stars 26 forks source link

Integrate LPVS as a GitHub Action and Publish to GitHub Marketplace #319

Open o-kopysov opened 12 months ago

o-kopysov commented 12 months ago

In this task, we aim to streamline and enhance user workflow by implementing LPVS as a GitHub Action.

Objectives:

Configure LPVS to run as a GitHub Action, ensuring seamless execution within the repository. Define workflow steps for LPVS to fit into your CI/CD pipeline seamlessly.

Allow users to customize LPVS configurations through GitHub Action parameters, ensuring flexibility for various use cases. Provide clear documentation for customization options to empower users.

Implement thorough testing to ensure the reliability and consistency of LPVS within the GitHub Action environment. Validate the integration across different scenarios to guarantee robust functionality.

Prepare the necessary artifacts and documentation for submission to the GitHub Marketplace. Follow GitHub's guidelines for Marketplace submissions to ensure a smooth review process.

tiokim commented 11 months ago

When it comes to the Github Marketplace submission, I don't know the difference from scanoss.app and feel that it is not our role.

tdrozdovsky commented 11 months ago

When it comes to the Github Marketplace submission, I don't know the difference from scanoss.app and feel that it is not our role.

Thanks, that's a very good point!

My assumptions about this are as follows:

  1. We can offer github action. Unlike the application, it does not require installation by the organization leader.
  2. The free version of the application for Open Source has a limitations:
    • Unlimited Public Repositories
    • Unlimited Collaborators
    • Scan limit: 5 files/day
    • (Limited Availability)

So we can think about this.

tiokim commented 11 months ago
  1. We can offer github action. Unlike the application, it does not require installation by the organization leader.

After #300 merged, It seems good to make how to use LPVS for github action!