From 86f7454d35299fe948fb4edbe720e2ec534fbde5 Mon Sep 17 00:00:00 2001
From: Tom Hu <thomas.hu@sentry.io>
Date: Tue, 21 Apr 2026 06:15:35 +0900
Subject: [PATCH] ci: add Enforce License Compliance workflow

---
 .fossa.yml                                       | 11 +++++++++++
 .github/workflows/enforce-license-compliance.yml | 15 +++++++++++++++
 requirements.txt                                 |  1 +
 3 files changed, 27 insertions(+)
 create mode 100644 .fossa.yml
 create mode 100644 .github/workflows/enforce-license-compliance.yml
 create mode 100644 requirements.txt

diff --git a/.fossa.yml b/.fossa.yml
new file mode 100644
index 0000000..66e904f
--- /dev/null
+++ b/.fossa.yml
@@ -0,0 +1,11 @@
+version: 3
+
+# FOSSA CLI for getsentry/action-enforce-license-compliance.
+# https://github.com/fossas/fossa-cli/blob/master/docs/references/files/fossa-yml.md
+
+project:
+  id: github.com/codecov/python-testing
+  url: https://github.com/codecov/python-testing
+
+telemetry:
+  scope: "off"
diff --git a/.github/workflows/enforce-license-compliance.yml b/.github/workflows/enforce-license-compliance.yml
new file mode 100644
index 0000000..1c1aaed
--- /dev/null
+++ b/.github/workflows/enforce-license-compliance.yml
@@ -0,0 +1,15 @@
+name: Enforce License Compliance
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+  workflow_dispatch:
+
+jobs:
+  enforce-license-compliance:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Enforce License Compliance'
+        uses: getsentry/action-enforce-license-compliance@57ba820387a1a9315a46115ee276b2968da51f3d # main
+        with:
+          fossa_api_key: ${{ secrets.FOSSA_API_KEY }}
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..859352f
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1 @@
+# FOSSA: setuptools discovery target at repo root (add real deps here if applicable).