license-lint.yml

# SPDX-FileCopyrightText: 2024 Digg - Agency for Digital Government
#
# SPDX-License-Identifier: CC0-1.0

# Description:
# This workflow checks your repository for REUSE compliance, ensuring that all files
# have proper SPDX license headers and copyright information. It helps enforce
# open-source licensing best practices.
#
# Usage:
# 1. Add the following to your workflow file:
#    jobs:
#      reuse-compliance:
#        uses: <orgname>/<reponame>/.github/workflows/<workflowname>.yml@main
#
# 2. Ensure your repository has a `.reuse/dep5` file or equivalent configuration
#    to define licensing and copyright information.
#
# 3. The workflow will analyze your repository and report any REUSE compliance issues.
---
    name: REUSE Compliance
    
    on: [workflow_call] # yamllint disable-line rule:truthy
    
    permissions:
      contents: read
    
    jobs:
      reuse:
        name: License (REUSE) analysis
        runs-on: ubuntu-latest
        steps:
          - name: Checkout repository
            uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
            with:
              fetch-depth: 7
    
          - name: REUSE Compliance
            uses: fsfe/reuse-action@3ae3c6bdf1257ab19397fab11fd3312144692083 #v4.0