merge upstream

.github/FUNDING.yml

@@ -0,0 +1,12 @@
+# These are supported funding model platforms
+
+github: frapposelli
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: # Replace with a single Ko-fi username
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/ci.yml

@@ -0,0 +1,37 @@
+name: ci
+on:
+  pull_request:
+    branches:
+      - master
+  push:
+    branches:
+      - master
+jobs:
+  ci:
+    name: go${{ matrix.go_version }}/${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        go_version: ['1.22']
+        os: [ubuntu-latest, windows-latest, macOS-latest]
+    steps:
+    - name: Use Go ${{ matrix.go_version }}
+      uses: actions/setup-go@v5
+      with:
+        go-version: ${{ matrix.go_version }}
+    - name: Check out code into the Go module directory
+      uses: actions/checkout@v4
+    - name: run coverage
+      run: |
+        bash hack/coverage
+    - name: Install and check
+      run: |
+        go build -mod=vendor
+        bash -c "./wwhrd check"
+    - name: Upload coverage to Codecov  
+      uses: codecov/codecov-action@v3
+      if: matrix.go_version == '1.22' && matrix.os == 'ubuntu-latest'
+      with:
+        token: ${{ secrets.CODECOV_TOKEN }}
+        file: ./.cover/cover.out
+        fail_ci_if_error: true

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,36 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ master ]
+    paths:
+    - '**.go'
+  pull_request:
+    branches: [ master ]
+    paths:
+    - '**.go'
+  schedule:
+    - cron: '38 10 * * 0'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'go' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3

.github/workflows/release.yml

@@ -0,0 +1,30 @@
+name: release
+on:
+  push:
+    tags:
+      - '*'
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout entire git history
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.16'
+      - name: Registry login
+        run: docker login -u ${DOCKER_USERNAME} -p ${DOCKER_PASSWORD} docker.io
+        env:
+          DOCKER_USERNAME: frapposelli
+          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Run GoReleaser
+        uses: goreleaser/[email protected]
+        with:
+          version: latest
+          args: release --rm-dist
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_KEY }}

.gitignore

@@ -24,7 +24,11 @@ _testmain.go
 
 wwhrd
 wwhrd.exe
+wwhrd-graph.png
 
 .cover
+.vscode
 
 dist/
+
+.idea/

.goreleaser.yaml

@@ -0,0 +1,51 @@
+# yaml-language-server: $schema=https://goreleaser.com/static/schema.json
+# vim: set ts=2 sw=2 tw=0 fo=cnqoj
+
+version: 2
+
+before:
+  hooks:
+    - go mod tidy
+
+builds:
+  - env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - windows
+      - darwin
+    goarch:
+      - amd64
+      - arm64
+
+archives:
+  - id: github
+    name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
+    format: tar.gz
+    files:
+    - LICENSE*
+    - README*
+checksum:
+  name_template: '{{ .ProjectName }}_{{ .Version }}_checksums.txt'
+dockers:
+  - image_templates: 
+    - "frapposelli/wwhrd:latest"
+    - "frapposelli/wwhrd:{{ .Tag }}"
+    - "frapposelli/wwhrd:v{{ .Major }}"
+    goos: linux
+    goarch: amd64
+    dockerfile: Dockerfile
+brews:
+  - directory: Formula
+    repository:
+      owner: frapposelli
+      name: homebrew-tap
+    commit_author:
+      name: Fabio Rapposelli
+      email: [email protected]
+    homepage: "https://github.com/frapposelli/wwhrd/blob/master/README.md"
+    description: "Have Henry Rollins check vendor licenses in your Go project"
+    test: |
+      system "#{bin}/wwhrd -v"
+    install: |
+      bin.install "wwhrd"

.wwhrd.yml

@@ -1,13 +1,10 @@
 ---
-blacklist:
+denylist:
   - GPL-2.0
 
-whitelist:
+allowlist:
   - Apache-2.0
   - MIT
-  - NewBSD
-  - FreeBSD
   - ISC
-
-exceptions:
-  - github.com/davecgh/go-spew/spew/...
+  - BSD-2-Clause
+  - BSD-3-Clause