dependencies-and-licenses.yml

name: Dependencies and Licenses
on:
  release:
    types:
      - published
defaults:
  run:
    shell: bash
jobs:
  generate-dependencies:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Checkout Core Repo
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
      - name: Set up Go
        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed #v5.1.0
        with:
          go-version: '~1.23'
      - name: Install go-licence-detector
        run: |
          go install go.elastic.co/go-licence-detector@v0.6.0
      - name: Clean Go mod
        run: go mod tidy
      - name: Generate Dependencies and Licenses
        run: go list -m -json all | go-licence-detector -includeIndirect -depsTemplate=.dependencies/templates/dependencies.csv.tmpl -depsOut=dependencies-and-licenses.txt
      - name: Upload dependencies and licenses artifact
        run: |
          curl --request POST "https://uploads.github.com/repos/Dynatrace/dynatrace-configuration-as-code/releases/${{ github.event.release.id }}/assets?name=dependencies-and-licenses.txt" \
               --header "Accept: application/vnd.github+json" \
               --header "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" \
               --header "X-GitHub-Api-Version: 2022-11-28" \
               --header "Content-Type: application/octet-stream" \
               --fail \
               --data-binary @dependencies-and-licenses.txt