From 3220944b127a29ab2d0cdb3ed7915579bee2953c Mon Sep 17 00:00:00 2001
From: Admin <1+admin@noreply.git.dcntrlized.org>
Date: Wed, 7 Oct 2026 23:46:08 +0100
Subject: [PATCH] ci: make the advisory license check work on the egress-free
 runner

The hardened runner's job network has no internet access, so `apk add` and
downloading addlicense from GitHub cannot work. git, curl, jq and addlicense
are baked into the runner's job image (infra/gitea-runner/ci-tools.Dockerfile).
---
 .gitea/workflows/license.yml | 14 ++++----------
 1 file changed, 4 insertions(+), 10 deletions(-)

diff --git a/.gitea/workflows/license.yml b/.gitea/workflows/license.yml
index b5c25ac..2872988 100644
--- a/.gitea/workflows/license.yml
+++ b/.gitea/workflows/license.yml
@@ -33,16 +33,10 @@ jobs:
     name: addlicense
     runs-on: alpine-latest
     steps:
-      - name: Prerequisites
-        run: apk add --no-cache git curl ca-certificates jq
-
-      - name: Install addlicense
-        run: |
-          set -e
-          curl -fsSL -o /tmp/addlicense.tgz \
-            https://github.com/google/addlicense/releases/download/v1.2.0/addlicense_v1.2.0_Linux_x86_64.tar.gz
-          tar -xzf /tmp/addlicense.tgz -C /tmp
-          install -m 0755 /tmp/addlicense /usr/local/bin/addlicense
+      # git, curl, jq and addlicense are baked into the runner's job image
+      # (infra/gitea-runner/ci-tools.Dockerfile in the root repo). The job
+      # network has no egress, so `apk add` and downloading addlicense from
+      # the internet cannot work here.
 
       - name: Check added files for an AGPL header
         env: