Security playbook
License Compliance Scan
Weekly dependency-tree scan that files one ticket listing every licence violation, review item, or unknown package.
Weekly full-dependency-tree licence scan that files one ticket listing every denied, review-required, or unknown licence, with dependency paths and recommendations. Set your repository on the Clone step and your ticket integration on the Create step after importing.
- Identifier
license-compliance-scan- Version
- 1.0.1
- Steps
- 4
- Triggers
- 1
- compliance
- licensing
- security
- scheduled
- automated
When it runs
schedule.weekly- Schedule
- Every Monday at 05:00 UTC
0 5 * * 1 - Timezone
- UTC
The pipeline
The graph below is the one the workflow opens with in the builder, same steps, same layout, drawn on the same canvas. The run playing through it is a simulation; the branches and conditions are real.
- 01Weekly Schedule (Monday 05:00 UTC)
triggerThe event that starts the run.
- 02Clone Repository ⚠️ SET YOUR REPO
git.cloneShallow-clones the repository at the right ref.
- 03Scan Dependency Licences
agent.runOne agent works the task with its toolkit.
- 04File Licence Violation Ticket
ticket.createOpens a ticket on the connected tracker.
Branches
- license_agent to file_violation: runs only if outputs.license_agent.message contains RESULT: VIOLATIONS
The agent
Licence Compliance Auditor
- Base type
- Senior Developer
- Temperature
- 0.1
- Max iterations
- 40
- Tools
- 5
Filesystem · 2
read_fileRead File · readlist_dirList Directory · read
Terminal · 1
run_terminal_cmdRun Terminal Command · write
Code search · 1
code_searchCode Search · read
Status · 1
update_statusUpdate Status · write