diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml index 69581df..95260d8 100644 --- a/.github/workflows/license-check.yml +++ b/.github/workflows/license-check.yml @@ -45,9 +45,6 @@ on: token: description: Token for private dependencies; an alternative to GitHub App credentials required: false - dash-api-token: - description: "Eclipse DASH API Token for license verification" - required: true jobs: license-check: @@ -92,10 +89,7 @@ jobs: OUTPUT="" EXIT_CODE=0 - # Use org secret as fallback if dash-api-token is not provided - TOKEN="${{ secrets.dash-api-token }}" - - CMD="bazel ${{ inputs.bazel-target }} -- -review -project automotive.score -repo $REPO_URL -token $TOKEN" + CMD="bazel ${{ inputs.bazel-target }} -- -project automotive.score -repo $REPO_URL" echo "Running: $CMD" CHECK_OUTPUT=$($CMD 2>&1) @@ -136,6 +130,10 @@ jobs: **Status:** ${{ env.exit_code == 0 && '✅ Passed' || '⚠️ Needs Review' }} + #### Manual IP review + + This workflow reports license findings but does not create Eclipse IP Team review requests automatically. If a review is needed, follow the [DASH manual review-request instructions](https://github.com/eclipse-dash/dash-licenses#automatic-ip-team-review-requests). +
Click to expand output diff --git a/README.md b/README.md index a99adbb..dd3e34c 100644 --- a/README.md +++ b/README.md @@ -90,14 +90,11 @@ jobs: with: repo-url: "${{ github.server_url }}/${{ github.repository }}" # optional, this is the default bazel-target: "run //:license-check" # optional, this is the default - secrets: - dash-api-token: ${{ secrets.ECLIPSE_GITLAB_API_TOKEN }} # mandatory - the Eclispe DASH API token ``` This workflow: -✅ Runs **DASH license compliance checks** for **Rust, C++, and Python** -✅ Uses the **organization secret** `ECLIPSE_GITLAB_API_TOKEN` +✅ Runs **license compliance checks** for **Rust, C++, and Python** without a DASH API token ✅ Comments results directly on the **Pull Request** > ℹ️ **Note:** You can override the Bazel command using the `bazel-target` input.