hfl

# R7 - License Check (Legal Audit)
# Prevents introduction of copyleft dependencies

name: License Check

on:
  workflow_dispatch:  # Solo ejecución manual

jobs:
  check-licenses:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install dependencies
        run: |
          pip install "pip-licenses>=4.0,<5.0"
          pip install -e .

      - name: Check for copyleft licenses
        run: |
          echo "Checking for GPL/AGPL/LGPL licenses..."
          pip-licenses -f plain -u --fail-on="GPL;GPLv2;GPLv3;AGPL;AGPLv3;LGPL;LGPLv2;LGPLv3"

      - name: Generate license report
        if: always()
        run: |
          pip-licenses -f markdown -u > license-report.md
          cat license-report.md

      - name: Upload license report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: license-report
          path: license-report.md