open-telemetry / open-telemetry/shared-workflows
FOSSA pre-merge check
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 7
- Forks
- 18
- Avg merge
- 22h 1m
- Merged PRs (30d)
- 75
Description
In otel-demo, we have missed that k6 package brings problematic license in https://github.com/open-telemetry/opentelemetry-demo/pull/3564
All FOSSA checks now are post-merge and working on main.
It will be great to have shared check which will be executed on every PR. It not necessary to report results to FOSSA, results should be available in the PR.
I suppose that we need a way to ignore some issues (for multi-licensed packages), but in general, it should block merge.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the existing post-merge FOSSA checks that work on main and identify the shared workflow entry point used for pull requests. Define how the check exposes results in each PR, blocks merging for problematic licenses, and permits explicit exceptions for multi-licensed packages.
Written by the indexing model from the issue text.
Assessment
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100