phylum-dev / install-phylum-latest-action Goto Github PK

The CLI, starting with the v2.0.0 release, changed its artifact packaging and naming scheme. When that version of the CLI is released, it will break the install-phylum-latest-action GitHub Action (GHA). This issue is to ensure there is a working GHA to use for CLI v2.0+ installs.

This action should have the ability to install directly from the latest CI build on the main branch of the CLI.

While we would not expect this to be used by customers, we could use it for testing to provide a sort of "canary" before a CLI release that would alert us if/when changes in the main branch would break this repository.

Description

A license for this repository/project needs to be added. It should be the GNU General Public License (GPL) v3.0 or later.

Additional Details

This change is directed towards all public repositories in the phylum-dev organization (with the exception of forked repos).

Acceptance Criteria

• The license is changed to GPLv3+
• Documentation is updated

The settings.yaml file will be moving in the next release of the CLI, which will break the method used here to set phylum_token.

Instead of modifying the settings.yaml file, this action should be setting an environment variable that can be used in future steps.

The CLI uses the PHYLUM_API_KEY environment variable (which has existed for a while, but is not yet documented until phylum-dev/cli#228 is merged), so setting this should make everything work in a way that will not break when the settings.yaml file moves.