Configure Static Code & License Analysis

.github/config/.licenserc.yaml

@@ -0,0 +1,36 @@
+# see https://github.com/marketplace/actions/license-eye-header#configurations
+
+header:
+  # this is not the actual license, but the desired compatibility
+  license:
+    spdx-id: Apache-2.0
+    copyright-year: 2024
+    copyright-owner: Zaphiro Technologies
+
+  paths-ignore:
+    - '.github'
+    - '.docker'
+    - '**/*.{md,MD}'
+    - 'go.mod'
+    - 'go.sum'
+
+  comment: on-failure
+
+# If you don't want to check dependencies' license compatibility, remove the following part
+dependency:
+  files:
+    - go.mod            # If this is a Go project.
+  licenses:
+    # these are not real licenses, but the desired compatibility
+    - name: github.com/zaphiro-technologies/cim-measurements-go
+      license: Apache-2.0
+    - name: github.com/zaphiro-technologies/logging
+      license: Apache-2.0
+    - name: github.com/zaphiro-technologies/observability
+      license: Apache-2.0
+    - name: github.com/zaphiro-technologies/protobuf
+      license: Apache-2.0
+    - name: github.com/zaphiro-technologies/roger 
+      license: Apache-2.0
+    - name: github.com/zaphiro-technologies/golib 
+      license: Apache-2.0

.github/workflows/license.yaml

@@ -0,0 +1,16 @@
+name: License
+
+on:
+  workflow_dispatch:
+  pull_request:
+    types: [opened, reopened, ready_for_review, synchronize]
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+jobs:
+  license:
+    uses: zaphiro-technologies/github-workflows/.github/workflows/license.yaml@main
+    secrets: inherit

.snyk

@@ -0,0 +1,7 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+ignore: {}
+patch: {}
+exclude:
+  global:
+    - vendor/**

sonar-project.properties

@@ -0,0 +1,16 @@
+sonar.projectKey=zaphiro-technologies_protobuf
+sonar.organization=zaphiro-technologies
+sonar.sources=.
+sonar.exclusions=**/*_test.go, **/vendor/**, **/*.xml, **/*.md, .github/*, **/*.sql, **/*_test.go
+sonar.tests=.
+sonar.test.inclusions=**/*_test.go
+sonar.test.exclusions=**/vendor/**
+sonar.go.coverage.reportPaths=coverage/coverage.out
+sonar.language=go
+
+# This is the name and version displayed in the SonarCloud UI.
+#sonar.projectName=storer
+#sonar.projectVersion=1.0
+
+# Encoding of the source code. Default is default system encoding
+#sonar.sourceEncoding=UTF-8