feat(ci): add fossa scan

.github/workflows/fossa.yml

@@ -0,0 +1,32 @@
+# Copyright © Michal Čihař <[email protected]>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+name: FOSSA
+
+on:
+  push:
+    branches:
+    - main
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  fossa-scan:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout Code
+      uses: actions/checkout@v3
+
+    - name: Run FOSSA Scan
+      uses: fossas/[email protected]
+      with:
+        api-key: ${{secrets.fossaApiKey}}
+
+    - name: Run FOSSA Test
+      uses: fossas/[email protected]
+      with:
+        api-key: ${{secrets.fossaApiKey}}
+        run-tests: true