e-volv

Security playbook

LicenseComplianceScan

Weekly dependency-tree scan that files one ticket listing every licence violation, review item, or unknown package.

Weekly full-dependency-tree licence scan that files one ticket listing every denied, review-required, or unknown licence, with dependency paths and recommendations. Set your repository on the Clone step and your ticket integration on the Create step after importing.

Identifier
license-compliance-scan
Version
1.0.1
Steps
4
Triggers
1
  • compliance
  • licensing
  • security
  • scheduled
  • automated

When it runs

Scheduleschedule.weekly
Schedule
Every Monday at 05:00 UTC 0 5 * * 1
Timezone
UTC

The pipeline

The graph below is the one the workflow opens with in the builder — same steps, same layout, drawn on the same canvas. The run playing through it is a simulation; the branches and conditions are real.

React Flow
  1. 01
    Weekly Schedule (Monday 05:00 UTC)trigger

    The event that starts the run.

  2. 02
    Clone Repository ⚠️ SET YOUR REPOgit.clone

    Shallow-clones the repository at the right ref.

  3. 03
    Scan Dependency Licencesagent.run

    One agent works the task with its toolkit.

  4. 04
    File Licence Violation Ticketticket.create

    Opens a ticket on the connected tracker.

Branches

  • license_agent to file_violation: runs only if outputs.license_agent.message contains RESULT: VIOLATIONS

The agent

Licence Compliance Auditor

Base type
Senior Developer
Temperature
0.1
Max iterations
40
Tools
5

Filesystem · 2

  • read_fileRead File · read
  • list_dirList Directory · read

Terminal · 1

  • run_terminal_cmdRun Terminal Command · write

Code search · 1

  • code_searchCode Search · read

Status · 1

  • update_statusUpdate Status · write