feat: Use non-privileged user in zac docker image #2387
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # | |
| # SPDX-FileCopyrightText: 2024 Lifely | |
| # SPDX-License-Identifier: EUPL-1.2+ | |
| # | |
| name: Check SPDX License Headers | |
| on: | |
| pull_request: | |
| merge_group: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| checks: write | |
| pull-requests: write | |
| # Only allow a single concurrent run per branch. Cancel in-progress runs on multiple pushes when not on main branch. | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: ${{ !contains(github.ref, 'main')}} | |
| jobs: | |
| check-spdx-license-headers: | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Check License Header | |
| uses: apache/skywalking-eyes/header@5c5b974209f0de5d905f37deb69369068ebfc15c # v0.7.0 | |
| with: | |
| log: info | |
| config: .licenserc.yaml | |
| token: ${{ github.token }} | |
| mode: check |