👷 Add FOSSA scan workflow & .fossa.yml

Signed-off-by: Rintaro Okamura <rintaro.okamura@gmail.com>

.fossa.yml

@@ -0,0 +1,94 @@
+# Generated by FOSSA CLI (https://github.com/fossas/fossa-cli)
+# Visit https://fossa.com to learn more
+
+version: 2
+cli:
+  server: https://app.fossa.com
+  fetcher: custom
+  project: https://github.com/vdaas/vald
+analyze:
+  modules:
+  - name: github.com/vdaas/vald/cmd/agent/core/ngt
+    type: go
+    target: github.com/vdaas/vald/cmd/agent/core/ngt
+    path: cmd/agent/core/ngt
+  - name: github.com/vdaas/vald/cmd/agent/sidecar
+    type: go
+    target: github.com/vdaas/vald/cmd/agent/sidecar
+    path: cmd/agent/sidecar
+  - name: github.com/vdaas/vald/cmd/discoverer/k8s
+    type: go
+    target: github.com/vdaas/vald/cmd/discoverer/k8s
+    path: cmd/discoverer/k8s
+  - name: github.com/vdaas/vald/cmd/gateway/vald
+    type: go
+    target: github.com/vdaas/vald/cmd/gateway/vald
+    path: cmd/gateway/vald
+  - name: github.com/vdaas/vald/cmd/manager/backup/cassandra
+    type: go
+    target: github.com/vdaas/vald/cmd/manager/backup/cassandra
+    path: cmd/manager/backup/cassandra
+  - name: github.com/vdaas/vald/cmd/manager/backup/mysql
+    type: go
+    target: github.com/vdaas/vald/cmd/manager/backup/mysql
+    path: cmd/manager/backup/mysql
+  - name: github.com/vdaas/vald/cmd/manager/compressor
+    type: go
+    target: github.com/vdaas/vald/cmd/manager/compressor
+    path: cmd/manager/compressor
+  - name: github.com/vdaas/vald/cmd/manager/index
+    type: go
+    target: github.com/vdaas/vald/cmd/manager/index
+    path: cmd/manager/index
+  - name: github.com/vdaas/vald/cmd/manager/replication/agent
+    type: go
+    target: github.com/vdaas/vald/cmd/manager/replication/agent
+    path: cmd/manager/replication/agent
+  - name: github.com/vdaas/vald/cmd/manager/replication/controller
+    type: go
+    target: github.com/vdaas/vald/cmd/manager/replication/controller
+    path: cmd/manager/replication/controller
+  - name: github.com/vdaas/vald/cmd/meta/cassandra
+    type: go
+    target: github.com/vdaas/vald/cmd/meta/cassandra
+    path: cmd/meta/cassandra
+  - name: github.com/vdaas/vald/cmd/meta/redis
+    type: go
+    target: github.com/vdaas/vald/cmd/meta/redis
+    path: cmd/meta/redis
+  - name: github.com/vdaas/vald/cmd/tools/cli/vdctl
+    type: go
+    target: github.com/vdaas/vald/cmd/tools/cli/vdctl
+    path: cmd/tools/cli/vdctl
+  - name: github.com/vdaas/vald/hack/helm/schema/gen
+    type: go
+    target: github.com/vdaas/vald/hack/helm/schema/gen
+    path: hack/helm/schema/gen
+  - name: github.com/vdaas/vald/hack/license/gen
+    type: go
+    target: github.com/vdaas/vald/hack/license/gen
+    path: hack/license/gen
+  - name: github.com/vdaas/vald/hack/tools/config/agent/core/ngt
+    type: go
+    target: github.com/vdaas/vald/hack/tools/config/agent/core/ngt
+    path: hack/tools/config/agent/core/ngt
+  - name: github.com/vdaas/vald/hack/tools/config/discoverer/k8s
+    type: go
+    target: github.com/vdaas/vald/hack/tools/config/discoverer/k8s
+    path: hack/tools/config/discoverer/k8s
+  - name: github.com/vdaas/vald/hack/tools/config/gateway/vald
+    type: go
+    target: github.com/vdaas/vald/hack/tools/config/gateway/vald
+    path: hack/tools/config/gateway/vald
+  - name: github.com/vdaas/vald/hack/tools/config/manager/backup/mysql
+    type: go
+    target: github.com/vdaas/vald/hack/tools/config/manager/backup/mysql
+    path: hack/tools/config/manager/backup/mysql
+  - name: github.com/vdaas/vald/hack/tools/config/meta/redis
+    type: go
+    target: github.com/vdaas/vald/hack/tools/config/meta/redis
+    path: hack/tools/config/meta/redis
+  - name: github.com/vdaas/vald/hack/tools/metrics
+    type: go
+    target: github.com/vdaas/vald/hack/tools/metrics
+    path: hack/tools/metrics

.github/workflows/fossa.yml

@@ -0,0 +1,19 @@
+name: "Run FOSSA scan"
+on:
+  pull_request:
+    types:
+      - "labeled"
+
+jobs:
+  fossa-scan:
+    name: 'FOSSA scan using fossa-cli'
+    runs-on: ubuntu-latest
+    container:
+      image: vdaas/vald-ci-container:nightly
+    if: startsWith( github.ref, 'refs/tags/') || github.event.action == 'labeled' && github.event.label.name == 'actions/fossa'
+    steps:
+      - uses: actions/checkout@v2
+      - uses: fossa-contrib/fossa-action@v1
+        with:
+          fossa-api-key: ${{ secrets.FOSSA_API_KEY }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}