feat(emulator): local cloud emulators + emulator-based advanced quick-start & docs example drawer #11053
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency Review | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| jobs: | |
| dependency-review: | |
| name: Review Dependency Licenses | |
| runs-on: | |
| - runs-on=${{github.run_id}} | |
| - runner=terraform | |
| - tag=atmos | |
| - extras=s3-cache | |
| - private=false | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Go | |
| uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 | |
| with: | |
| go-version-file: go.mod | |
| - name: Dependency Review | |
| uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 | |
| with: | |
| # Disable OpenSSF scorecard to reduce summary size (prevents 1024k limit errors) | |
| show-openssf-scorecard: false | |
| # Allow only permissive licenses | |
| # NOTE: GitHub's dependency graph detects Go modules from go.mod automatically | |
| # License checking works at the manifest level for go.mod dependencies | |
| allow-licenses: MIT, MIT-0, Apache-2.0, BSD-2-Clause, BSD-2-Clause-Views, BSD-3-Clause, ISC, MPL-2.0, 0BSD, Unlicense, CC0-1.0, CC-BY-3.0, CC-BY-4.0, CC-BY-SA-3.0, Python-2.0, OFL-1.1, LicenseRef-scancode-generic-cla, LicenseRef-scancode-unknown-license-reference, LicenseRef-scancode-unicode, LicenseRef-scancode-google-patent-license-golang | |
| # Allow specific packages where GitHub cannot detect the license but we've verified it | |
| # modernc.org/libc: BSD-3-Clause (verified at https://gitlab.com/cznic/libc/-/blob/master/LICENSE) | |
| # Transitive dependency of modernc.org/sqlite used for AI session storage | |
| allow-dependencies-licenses: "pkg:golang/modernc.org/libc" | |
| # Fail on moderate or higher severity vulnerabilities | |
| fail-on-severity: moderate | |
| # Comment on PR with details | |
| comment-summary-in-pr: always | |
| - name: Generate NOTICE file | |
| run: ./scripts/generate-notice.sh | |
| - name: Check if NOTICE is up to date | |
| run: | | |
| if ! git diff --exit-code NOTICE; then | |
| echo "::error::NOTICE file is out of date. Run './scripts/generate-notice.sh' locally and commit the changes." | |
| exit 1 | |
| fi |