2023-01-13 00:05:48 +05:30
|
|
|
#!/usr/bin/env bash
|
|
|
|
|
set -euo pipefail
|
2022-07-23 23:45:48 +05:30
|
|
|
#
|
|
|
|
|
# This script runs the LicenseFinder gem to verify that all licenses are
|
|
|
|
|
# compliant. However, bundler v2.2+ and LicenseFinder do not play well
|
|
|
|
|
# together when:
|
|
|
|
|
#
|
|
|
|
|
# 1. There are native gems installed (e.g. nokogiri, grpc, and google-protobuf).
|
|
|
|
|
# 2. `Gemfile.lock` doesn't list the platform-specific gems that were installed.
|
|
|
|
|
#
|
|
|
|
|
# A full explanation is here:
|
|
|
|
|
# https://github.com/pivotal/LicenseFinder/issues/828#issuecomment-953359134
|
|
|
|
|
#
|
|
|
|
|
# To work around the issue, we configure bundler to install gems for the
|
|
|
|
|
# current Ruby platform, which causes Gemfile and Gemfile.lock to be
|
|
|
|
|
# updated with the platform-specific gems. This allows LicenseFinder to
|
|
|
|
|
# run properly. After it finishes, we clean up the mess.
|
|
|
|
|
|
|
|
|
|
PROJECT_PATH=${1:-`pwd`}
|
|
|
|
|
|
|
|
|
|
echo "Using project path ${PROJECT_PATH}"
|
|
|
|
|
|
|
|
|
|
GEMFILE_DIFF=`git diff Gemfile Gemfile.lock`
|
|
|
|
|
|
|
|
|
|
if [ ! -z "$GEMFILE_DIFF" ]; then
|
|
|
|
|
echo "LicenseFinder needs to lock the Gemfile to the current platform, but Gemfile or Gemfile.lock has changes."
|
|
|
|
|
exit 1
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
BUNDLE_DEPLOYMENT=false BUNDLE_FROZEN=false bundle lock --add-platform `ruby -e "puts RUBY_PLATFORM"`
|
|
|
|
|
bundle exec license_finder --decisions-file config/dependency_decisions.yml --project-path ${PROJECT_PATH}
|
|
|
|
|
|
|
|
|
|
git checkout -q Gemfile Gemfile.lock
|
