check-licenses.yml

name: Check licenses

on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
  merge_group:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions:
  packages: read

jobs:
  isdraft:
    uses: ./.github/workflows/reusable-isdraft.yml
  check-licenses:
    runs-on: ubuntu-latest
    needs: isdraft
    timeout-minutes: 10
    env:
      LICENSES: "'Apache-2.0' 'GPL-3.0-only' 'GPL-3.0-or-later WITH Classpath-exception-2.0' 'MIT-0' 'Unlicense'"
      NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - name: Checkout sources
        uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc # v4.1.7
      - uses: actions/setup-node@v4.1.0
        with:
          node-version: "18.x"
          registry-url: "https://npm.pkg.github.com"
          scope: "@paritytech"

      - name: Check the licenses in Polkadot
        run: |
          shopt -s globstar
          npx @paritytech/license-scanner scan \
            --ensure-licenses ${{ env.LICENSES }} \
            --file-extensions '.rs' \
            -- ./polkadot

      - name: Check the licenses in Cumulus
        run: |
          shopt -s globstar
          npx @paritytech/license-scanner scan \
            --ensure-licenses ${{ env.LICENSES }} 'Unlicense' \
            --file-extensions '.rs' \
            -- ./cumulus

      - name: Check the licenses in Substrate
        run: |
          shopt -s globstar
          npx @paritytech/license-scanner scan \
            --ensure-licenses ${{ env.LICENSES }} \
            --file-extensions '.rs' \
            -- ./substrate

  check-product-references:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    env:
      NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - name: Checkout sources
        uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc # v4.1.7
      - uses: actions/setup-node@v4.1.0
        with:
          node-version: "18.x"
          registry-url: "https://npm.pkg.github.com"
          scope: "@paritytech"

      - name: Check the product references in Polkadot
        run: |
          shopt -s globstar
          npx @paritytech/license-scanner scan \
            --ensure-product 'Polkadot' \
            --file-extensions '.rs' \
            -- ./polkadot

      - name: Check the product references in Cumulus
        run: |
          shopt -s globstar
          npx @paritytech/license-scanner scan \
            --ensure-product 'Cumulus' \
            --file-extensions '.rs' \
            -- ./cumulus

      - name: Check the product references in Substrate
        run: |
          shopt -s globstar
          npx @paritytech/license-scanner scan \
            --ensure-product 'Substrate' \
            --file-extensions '.rs' \
            -- ./substrate