Merge pull request #2893 from zendesk/plonergan/fossa

Add fossa scan to ensure we can release under apache v2

.travis.yml

@@ -25,3 +25,13 @@ before_script:
   - mysql -u root -e 'set GLOBAL innodb_file_format = "barracuda"'
   - mysql -u root -e 'GRANT ALL ON *.* TO 'travis'@'localhost';'
 script: bundle exec rake $TASK
+
+# make sure we can release as apache v2
+matrix:
+  include:
+    - env: TASK=fossa # nice label for UI
+      before_script:
+        - export LOCAL=true && curl -H 'Cache-Control:no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install.sh | bash
+      script:
+        - ./fossa analyze --config config/fossa.yml # analyze dependencies and upload them (fails when missing api key)
+        - ./fossa test --config config/fossa.yml # wait for fossa to analyse the upload and fail if it finds issues, to add ignores contact [email protected] with subject "FOSSA ignore <NAME> in samson"

README.md

@@ -2,6 +2,7 @@
 
 [![Build Status](https://travis-ci.org/zendesk/samson.svg?branch=master)](https://travis-ci.org/zendesk/samson)
 [![DockerHub Status](https://img.shields.io/docker/stars/zendesk/samson.svg)](https://hub.docker.com/r/zendesk/samson)
+[![FOSSA Status](https://app.fossa.io/api/projects/git%2Bgithub.com%2Fzendesk%2Fsamson.svg?type=shield)](https://app.fossa.io/projects/git%2Bgithub.com%2Fzendesk%2Fsamson?ref=badge_shield)
 
 Samson is a web interface for deployments. [Live Demo](https://samson-demo.herokuapp.com)
 

config/fossa.yml

@@ -0,0 +1,18 @@
+# Generated by FOSSA CLI (https://github.com/fossas/fossa-cli)
+# Visit https://fossa.io to learn more
+
+version: 1
+cli:
+  server: https://app.fossa.io
+  fetcher: custom
+  project: [email protected]:zendesk/samson.git
+analyze:
+  modules:
+  - name: Samson
+    type: npm
+    target: .
+    path: .
+  - name: Gemfile
+    type: gem
+    target: .
+    path: .