Merge pull request #5428 from dzcvxe/dev #4863

	name: FOSSA
	on:
	push:
	# Exclude branches created by Dependabot to avoid triggering current workflow
	# for PRs initiated by Dependabot.
	branches-ignore:
	- 'dependabot/**'

	permissions:
	contents: read # Required by actions/checkout@v4 to fetch the repository contents.

	jobs:
	fossa:
	name: FOSSA
	# prevent job running from forked repository, otherwise
	# 1. running on the forked repository would fail as missing necessary secret.
	# 2. running on the forked repository would use unnecessary GitHub Action time.
	if: ${{ github.repository == 'karmada-io/karmada' }}
	runs-on: ubuntu-22.04
	steps:
	- name: checkout code
	uses: actions/checkout@v4
	- name: Run FOSSA scan and upload build data
	uses: fossas/fossa-action@v1
	with:
	api-key: ${{secrets.FOSSA_API_KEY}}

Provide feedback