license-headers.yml

# SPDX-FileCopyrightText: Copyright 2026 Stacklok, Inc.
# SPDX-License-Identifier: Apache-2.0

name: License Headers

on:
  workflow_call:

permissions:
  contents: read

jobs:
  check-license-headers:
    name: Check License Headers
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Set up Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version: 'stable'
          cache: false

      - name: Install addlicense
        run: go install github.com/google/addlicense@latest

      - name: Check license headers
        run: |
          # Check all Go files for SPDX license headers
          addlicense -check \
            -f .github/license-header.txt \
            -ignore '**/mocks/**' \
            -ignore '**/testdata/**' \
            -ignore 'vendor/**' \
            -ignore '**/*.pb.go' \
            -ignore '**/zz_generated*.go' \
            $(find . -name '*.go' -type f)