Consolidate license header workflows

Author: kiftio

.github/workflows/android-license-headers.yml

@@ -38,7 +38,8 @@ jobs:
             android:
               - 'platforms/android/**'
               - '.github/workflows/android-test.yml'
-              - '.github/workflows/android-license-headers.yml'
+              - '.github/workflows/license-headers.yml'
+              - 'scripts/check_license_headers.rb'
               - '.github/workflows/ci.yml'
             swift:
               - 'platforms/swift/**'
@@ -61,7 +62,8 @@ jobs:
             web:
               - 'platforms/web/**'
               - '.github/workflows/web.yml'
-              - '.github/workflows/web-license-headers.yml'
+              - '.github/workflows/license-headers.yml'
+              - 'scripts/check_license_headers.rb'
               - '.github/actions/setup/**'
               - '.github/workflows/ci.yml'
 
@@ -75,7 +77,9 @@ jobs:
     name: Android
     needs: changes
     if: needs.changes.outputs.android == 'true'
-    uses: ./.github/workflows/android-license-headers.yml
+    uses: ./.github/workflows/license-headers.yml
+    with:
+      target: platforms/android
 
   swift-test-package:
     name: Swift
@@ -147,7 +151,9 @@ jobs:
     name: Web
     needs: changes
     if: needs.changes.outputs.web == 'true'
-    uses: ./.github/workflows/web-license-headers.yml
+    uses: ./.github/workflows/license-headers.yml
+    with:
+      target: platforms/web/src
 
   # Single required status check for branch protection.
   # Passes when every relevant platform job either succeeded or was skipped

.github/workflows/ci.yml

@@ -0,0 +1,28 @@
+name: Check License Headers
+
+on:
+  workflow_call:
+    inputs:
+      target:
+        description: Directory to scan, relative to repo root (e.g. platforms/android)
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          submodules: true
+
+      - uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde # v1.307.0
+        with:
+          ruby-version: '3.3.6'
+
+      - name: Check license headers
+        run: ruby scripts/check_license_headers.rb "${{ inputs.target }}"

.github/workflows/license-headers.yml

@@ -64,7 +64,7 @@ jobs:
         run: pnpm verify
 
       - name: Check license headers
-        run: ./scripts/check_license_headers.rb
+        run: ruby "$GITHUB_WORKSPACE/scripts/check_license_headers.rb" platforms/web/src
 
       - name: Pack and inspect contents
         run: |

.github/workflows/web-license-headers.yml

@@ -100,7 +100,7 @@ jobs:
         run: pnpm verify
 
       - name: Check license headers
-        run: ./scripts/check_license_headers.rb
+        run: ruby "$GITHUB_WORKSPACE/scripts/check_license_headers.rb" platforms/web/src
 
       - name: Pack and inspect contents
         run: |

.github/workflows/web-publish-bootstrap.yml

@@ -76,7 +76,7 @@ open:
   "PRs": "https://github.com/Shopify/checkout-kit/pulls"
 
 check:
-  android-license-headers: cd platforms/android && ./scripts/check_license_headers.rb
+  android-license-headers: ./scripts/check_license_headers.rb platforms/android
   android-detekt: cd platforms/android && ./gradlew detekt
   android-lint: cd platforms/android && ./gradlew lintRelease
   swift-lint: cd platforms/swift && ./Scripts/lint
@@ -164,14 +164,14 @@ commands:
         desc: Run all Android checks (license headers, detekt, android lint)
         run: |
           set -e
+          ./scripts/check_license_headers.rb platforms/android
           cd platforms/android
-          ./scripts/check_license_headers.rb
           ./gradlew detekt
           ./gradlew lintRelease
         subcommands:
           license-headers:
             desc: Check MIT license headers in source files
-            run: cd platforms/android && ./scripts/check_license_headers.rb
+            run: ./scripts/check_license_headers.rb platforms/android
           detekt:
             desc: Run detekt static analysis
             run: cd platforms/android && ./gradlew detekt

.github/workflows/web-publish.yml

@@ -0,0 +1,40 @@
+#!/usr/bin/env ruby
+require 'find'
+
+# Extensions and excludes are baked in — this script is opinionated for the
+# platforms in this repo. Add to these lists when introducing a new language
+# or build-output directory that should be covered.
+EXTENSIONS = %w[.kt .kts .ts .tsx].freeze
+EXCLUDES = %w[
+  */build/generated/*
+  */build/*
+  *.test.ts
+  *.test.tsx
+  *.d.ts
+].freeze
+
+abort 'Usage: check_license_headers.rb <root>' if ARGV.empty?
+
+root = File.expand_path(ARGV[0])
+abort "error: #{ARGV[0]} is not a directory" unless File.directory?(root)
+
+missing = []
+
+Find.find(root) do |path|
+  next unless File.file?(path)
+  next unless EXTENSIONS.any? { |ext| path.end_with?(ext) }
+  next if EXCLUDES.any? { |pattern| File.fnmatch?(pattern, path) }
+
+  lines = File.readlines(path)
+  has_header = lines[0]&.start_with?('/*') && lines[1]&.include?('MIT License')
+  missing << path unless has_header
+end
+
+if missing.empty?
+  puts 'No missing license headers found'
+  exit 0
+end
+
+puts "#{missing.size} file(s) missing license headers:"
+missing.each { |f| puts "  #{f.sub("#{root}/", '')}" }
+exit 1