Add SPDX header check workflow for pull requests

[Copilot]

Automates SPDX copyright header validation on all PRs to main branch using zccrs/github-actions-spdx-checker@v1.

Implementation

• Workflow trigger: Pull requests to main branch
• File coverage: Multiple languages (py, js, ts, java, cpp, go, rs, rb, php, sh, xml, yaml, json, CMake, Makefile)
• Exclusions: vendor/**, node_modules/**
• Permissions: Minimal scope (contents: read, pull-requests: read)
• Git depth: Full history (fetch-depth: 0) for year range validation

Validation Rules

• New files: Must have current year SPDX header
• Modified files: Must update year range (e.g., 2023-2026)
• Error messages: Bilingual (EN/CN)

- uses: zccrs/github-actions-spdx-checker@v1
  with:
    base: origin/main
    include: '*.py,*.js,*.ts,*.jsx,*.tsx,*.java,*.cpp,*.c,*.h,*.hpp,*.go,*.rs,*.rb,*.php,*.sh,*.xml,*.yaml,*.yml,*.json,CMakeLists.txt,Makefile'
    exclude: 'vendor/**,node_modules/**'

Original prompt

Add SPDX Header Check Workflow

Overview

需要在 .github/workflows/ 目录下创建一个新的 GitHub Actions 工作流文件，用于自动检查 Pull Request 中文件的 SPDX 版权头部。

Requirements

创建文件

创建文件：.github/workflows/spdx-check.yml

文件内容

name: SPDX Header Check

on:
  pull_request:
    branches: [main]

jobs:
  spdx-check:
    runs-on: ubuntu-latest
    steps:
      - uses: zccrs/github-actions-spdx-checker@v1
        with:
          base: origin/main
          include: '*.py,*.js,*.ts,*.jsx,*.tsx,*.java,*.cpp,*.c,*.h,*.hpp,*.go,*.rs,*.rb,*.php,*.sh,*.xml,*.yaml,*.yml,*.json,CMakeLists.txt,Makefile'
          exclude: 'vendor/**,node_modules/**'

工作流功能

• 当有 PR 提交到 main 分支时自动触发
• 使用 zccrs/github-actions-spdx-checker@v1 action 检查 SPDX 头部
• 支持多种编程语言文件类型
• 自动排除 vendor 和 node_modules 目录
• 验证新文件包含当前年份的 SPDX 头部
• 确保修改文件正确更新年份范围

预期结果

• 所有后续的 Pull Request 都会自动进行 SPDX 头部检查
• 不符合规范的文件会导致检查失败
• 提供中英文双语错误提示

This pull request was created from Copilot chat.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[deepin-ci-robot]

Hi @copilot. Thanks for your PR.

I'm waiting for a linuxdeepin member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[deepin-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Copilot

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• debian/deepin/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment