You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@skywalking.apache.org by ke...@apache.org on 2020/12/27 04:54:37 UTC

[skywalking-eyes] 01/03: Resolve dependencies' license files

This is an automated email from the ASF dual-hosted git repository.

kezhenxu94 pushed a commit to branch deps
in repository https://gitbox.apache.org/repos/asf/skywalking-eyes.git

commit 813228043565b242bebda8ecc6ec8a35b54f1a0d
Author: kezhenxu94 <ke...@apache.org>
AuthorDate: Sat Dec 26 22:57:45 2020 +0800

    Resolve dependencies' license files
---
 .github/workflows/license-eye-check.yaml           |   2 -
 .licenserc.yaml                                    |   4 +
 license-eye/commands/{header/header.go => deps.go} |  23 ++--
 .../config/config.go => commands/deps_resolve.go}  |  42 +++---
 license-eye/commands/{header => }/header.go        |   8 +-
 .../commands/{header/check.go => header_check.go}  |  17 +--
 .../commands/{header/fix.go => header_fix.go}      |  15 +--
 license-eye/commands/root.go                       |  25 ++--
 license-eye/go.mod                                 |   2 +
 license-eye/go.sum                                 |  11 ++
 license-eye/pkg/config/config.go                   |   6 +
 license-eye/pkg/{config => deps}/config.go         |  29 ++--
 license-eye/pkg/deps/golang.go                     | 149 +++++++++++++++++++++
 .../header/header.go => pkg/deps/resolve.go}       |  40 +++---
 .../pkg/{config/config.go => deps/result.go}       |  46 +++----
 license-eye/pkg/header/check.go                    |   9 +-
 license-eye/pkg/header/check_test.go               |   9 +-
 license-eye/pkg/header/fix.go                      |   7 +-
 license-eye/pkg/{ => header}/result.go             |   2 +-
 license-eye/pkg/review/header.go                   |  11 +-
 20 files changed, 301 insertions(+), 156 deletions(-)

diff --git a/.github/workflows/license-eye-check.yaml b/.github/workflows/license-eye-check.yaml
index 869db6d..2bcfd23 100644
--- a/.github/workflows/license-eye-check.yaml
+++ b/.github/workflows/license-eye-check.yaml
@@ -44,8 +44,6 @@ jobs:
 
       - name: License Check
         run: make license
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Test
         run: make test
diff --git a/.licenserc.yaml b/.licenserc.yaml
index 5b6a539..0e5aab6 100644
--- a/.licenserc.yaml
+++ b/.licenserc.yaml
@@ -74,3 +74,7 @@ header: # `header` section is configurations for source codes license header.
     - '**/assets/assets.gen.go'
 
   comment: on-failure # on what condition license-eye will comment on the pull request, `on-failure`, `always`, `never`.
+
+dependency:
+  files:
+    - license-eye/go.mod
diff --git a/license-eye/commands/header/header.go b/license-eye/commands/deps.go
similarity index 61%
copy from license-eye/commands/header/header.go
copy to license-eye/commands/deps.go
index 8786217..87aadfd 100644
--- a/license-eye/commands/header/header.go
+++ b/license-eye/commands/deps.go
@@ -1,3 +1,4 @@
+//
 // Licensed to Apache Software Foundation (ASF) under one or more contributor
 // license agreements. See the NOTICE file distributed with
 // this work for additional information regarding copyright
@@ -14,27 +15,19 @@
 // KIND, either express or implied.  See the License for the
 // specific language governing permissions and limitations
 // under the License.
-//
-package header
+package commands
 
 import (
 	"github.com/spf13/cobra"
 )
 
-var (
-	// cfgFile is the config path to the config file of header command.
-	cfgFile string
-)
-
-var Header = &cobra.Command{
-	Use:     "header",
-	Aliases: []string{"h"},
-	Short:   "License header related commands; e.g. check, fix, etc.",
-	Long:    "`header` command walks the specified paths recursively and checks if the specified files have the license header in the config file.",
+var Deps = &cobra.Command{
+	Use:     "deps",
+	Aliases: []string{"d"},
+	Short:   "Dependencies related commands; e.g. check, etc.",
+	Long:    "deps command checks all dependencies of a module and their transitive dependencies.",
 }
 
 func init() {
-	Header.PersistentFlags().StringVarP(&cfgFile, "config", "c", ".licenserc.yaml", "the config file")
-	Header.AddCommand(CheckCommand)
-	Header.AddCommand(FixCommand)
+	Deps.AddCommand(ResolveCommand)
 }
diff --git a/license-eye/pkg/config/config.go b/license-eye/commands/deps_resolve.go
similarity index 57%
copy from license-eye/pkg/config/config.go
copy to license-eye/commands/deps_resolve.go
index 3b7c417..96ca6ca 100644
--- a/license-eye/pkg/config/config.go
+++ b/license-eye/commands/deps_resolve.go
@@ -1,3 +1,4 @@
+//
 // Licensed to Apache Software Foundation (ASF) under one or more contributor
 // license agreements. See the NOTICE file distributed with
 // this work for additional information regarding copyright
@@ -14,35 +15,32 @@
 // KIND, either express or implied.  See the License for the
 // specific language governing permissions and limitations
 // under the License.
-//
-package config
+package commands
 
 import (
-	"io/ioutil"
-
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg/header"
-
-	"gopkg.in/yaml.v3"
+	"github.com/apache/skywalking-eyes/license-eye/pkg/deps"
+	"github.com/spf13/cobra"
 )
 
-type Config struct {
-	Header header.ConfigHeader `yaml:"header"`
-}
+var ResolveCommand = &cobra.Command{
+	Use:     "resolve",
+	Aliases: []string{"r"},
+	Long:    "resolves all dependencies of a go.mod file and their transitive dependencies",
+	RunE: func(cmd *cobra.Command, args []string) error {
+		report := deps.Report{}
 
-// Parse reads and parses the header check configurations in config file.
-func (config *Config) Parse(file string) error {
-	logger.Log.Infoln("Loading configuration from file:", file)
+		if err := deps.Resolve(&Config.Deps, &report); err != nil {
+			return err
+		}
 
-	if bytes, err := ioutil.ReadFile(file); err != nil {
-		return err
-	} else if err := yaml.Unmarshal(bytes, config); err != nil {
-		return err
-	}
+		for _, result := range report.Resolved {
+			logger.Log.Debugln("Resolved:", result.Dependency)
+			logger.Log.Debugln("License:", result.LicenseFilePath)
+		}
 
-	if err := config.Header.Finalize(); err != nil {
-		return err
-	}
+		logger.Log.Debugln("Skipped:", len(report.Skipped))
 
-	return nil
+		return nil
+	},
 }
diff --git a/license-eye/commands/header/header.go b/license-eye/commands/header.go
similarity index 85%
copy from license-eye/commands/header/header.go
copy to license-eye/commands/header.go
index 8786217..aec10de 100644
--- a/license-eye/commands/header/header.go
+++ b/license-eye/commands/header.go
@@ -15,17 +15,12 @@
 // specific language governing permissions and limitations
 // under the License.
 //
-package header
+package commands
 
 import (
 	"github.com/spf13/cobra"
 )
 
-var (
-	// cfgFile is the config path to the config file of header command.
-	cfgFile string
-)
-
 var Header = &cobra.Command{
 	Use:     "header",
 	Aliases: []string{"h"},
@@ -34,7 +29,6 @@ var Header = &cobra.Command{
 }
 
 func init() {
-	Header.PersistentFlags().StringVarP(&cfgFile, "config", "c", ".licenserc.yaml", "the config file")
 	Header.AddCommand(CheckCommand)
 	Header.AddCommand(FixCommand)
 }
diff --git a/license-eye/commands/header/check.go b/license-eye/commands/header_check.go
similarity index 80%
rename from license-eye/commands/header/check.go
rename to license-eye/commands/header_check.go
index 6f9e76f..e721eb1 100644
--- a/license-eye/commands/header/check.go
+++ b/license-eye/commands/header_check.go
@@ -15,12 +15,10 @@
 // specific language governing permissions and limitations
 // under the License.
 //
-package header
+package commands
 
 import (
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg"
-	"github.com/apache/skywalking-eyes/license-eye/pkg/config"
 	"github.com/apache/skywalking-eyes/license-eye/pkg/header"
 	"github.com/apache/skywalking-eyes/license-eye/pkg/review"
 
@@ -32,26 +30,21 @@ var CheckCommand = &cobra.Command{
 	Aliases: []string{"c"},
 	Long:    "check command walks the specified paths recursively and checks if the specified files have the license header in the config file.",
 	RunE: func(cmd *cobra.Command, args []string) error {
-		var config config.Config
-		var result pkg.Result
-
-		if err := config.Parse(cfgFile); err != nil {
-			return err
-		}
+		var result header.Result
 
 		if len(args) > 0 {
 			logger.Log.Debugln("Overriding paths with command line args.")
-			config.Header.Paths = args
+			Config.Header.Paths = args
 		}
 
-		if err := header.Check(&config.Header, &result); err != nil {
+		if err := header.Check(&Config.Header, &result); err != nil {
 			return err
 		}
 
 		logger.Log.Infoln(result.String())
 
 		if result.HasFailure() {
-			if err := review.Header(&result, &config); err != nil {
+			if err := review.Header(&result, &Config); err != nil {
 				logger.Log.Warnln("Failed to create review comments", err)
 			}
 			return result.Error()
diff --git a/license-eye/commands/header/fix.go b/license-eye/commands/header_fix.go
similarity index 80%
rename from license-eye/commands/header/fix.go
rename to license-eye/commands/header_fix.go
index 4fbba48..4f1e50f 100644
--- a/license-eye/commands/header/fix.go
+++ b/license-eye/commands/header_fix.go
@@ -16,15 +16,13 @@
 // specific language governing permissions and limitations
 // under the License.
 //
-package header
+package commands
 
 import (
 	"fmt"
 	"strings"
 
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg"
-	"github.com/apache/skywalking-eyes/license-eye/pkg/config"
 	"github.com/apache/skywalking-eyes/license-eye/pkg/header"
 	"github.com/spf13/cobra"
 )
@@ -34,20 +32,15 @@ var FixCommand = &cobra.Command{
 	Aliases: []string{"f"},
 	Long:    "fix command walks the specified paths recursively and fix the license header if the specified files don't have the license header.",
 	RunE: func(cmd *cobra.Command, args []string) error {
-		var config config.Config
-		var result pkg.Result
+		var result header.Result
 
-		if err := config.Parse(cfgFile); err != nil {
-			return err
-		}
-
-		if err := header.Check(&config.Header, &result); err != nil {
+		if err := header.Check(&Config.Header, &result); err != nil {
 			return err
 		}
 
 		var errors []string
 		for _, file := range result.Failure {
-			if err := header.Fix(file, &config.Header, &result); err != nil {
+			if err := header.Fix(file, &Config.Header, &result); err != nil {
 				errors = append(errors, err.Error())
 			}
 		}
diff --git a/license-eye/commands/root.go b/license-eye/commands/root.go
index ab16bf8..fbe6b01 100644
--- a/license-eye/commands/root.go
+++ b/license-eye/commands/root.go
@@ -18,19 +18,21 @@
 package commands
 
 import (
-	headercommand "github.com/apache/skywalking-eyes/license-eye/commands/header"
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
+	"github.com/apache/skywalking-eyes/license-eye/pkg/config"
 
 	"github.com/sirupsen/logrus"
 	"github.com/spf13/cobra"
 )
 
 var (
-	verbosity string
+	verbosity  string
+	configFile string
+	Config     config.Config
 )
 
-// Root represents the base command when called without any subcommands
-var Root = &cobra.Command{
+// root represents the base command when called without any subcommands
+var root = &cobra.Command{
 	Use:           "license-eye command [flags]",
 	Long:          "A full-featured license guard to check and fix license headers and dependencies' licenses",
 	SilenceUsage:  true,
@@ -41,17 +43,24 @@ var Root = &cobra.Command{
 			return err
 		}
 		logger.Log.SetLevel(level)
+
+		if err := Config.Parse(configFile); err != nil {
+			return err
+		}
+
 		return nil
 	},
 	Version: version,
 }
 
 // Execute sets flags to the root command appropriately.
-// This is called by main.main(). It only needs to happen once to the Root.
+// This is called by main.main(). It only needs to happen once to the root.
 func Execute() error {
-	Root.PersistentFlags().StringVarP(&verbosity, "verbosity", "v", logrus.InfoLevel.String(), "log level (debug, info, warn, error, fatal, panic")
+	root.PersistentFlags().StringVarP(&verbosity, "verbosity", "v", logrus.InfoLevel.String(), "log level (debug, info, warn, error, fatal, panic")
+	root.PersistentFlags().StringVarP(&configFile, "config", "c", ".licenserc.yaml", "the config file")
 
-	Root.AddCommand(headercommand.Header)
+	root.AddCommand(Header)
+	root.AddCommand(Deps)
 
-	return Root.Execute()
+	return root.Execute()
 }
diff --git a/license-eye/go.mod b/license-eye/go.mod
index 096d2fb..c66062d 100644
--- a/license-eye/go.mod
+++ b/license-eye/go.mod
@@ -7,6 +7,8 @@ require (
 	github.com/google/go-github/v33 v33.0.0
 	github.com/sirupsen/logrus v1.7.0
 	github.com/spf13/cobra v1.1.1
+	golang.org/x/mod v0.4.0
 	golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45
+	golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e
 	gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776
 )
diff --git a/license-eye/go.sum b/license-eye/go.sum
index b1a492f..3143ee6 100644
--- a/license-eye/go.sum
+++ b/license-eye/go.sum
@@ -16,6 +16,7 @@ github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym
 github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
 github.com/alecthomas/template v0.0.0-20160405071501-a0175ee3bccc/go.mod h1:LOuyumcjzFXgccqObfd/Ljyb9UuFJ6TxHnclSeseNhc=
 github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0=
+github.com/apache/skywalking-eyes v0.0.0-20201226021955-d798d4f56aa5 h1:cMn7kz937Lz92NBpMXbawQlizM4qe3LYMil+DWQxznE=
 github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e/go.mod h1:3U/XgcO3hCbHZ8TKRvWD2dDTCfh9M9ya+I9JpbB7O8o=
 github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da/go.mod h1:Q73ZrmVTwzkszR9V5SSuryQ31EELlFMUz1kKyl939pY=
 github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
@@ -199,6 +200,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5 h1:58fnuSXlxZmFdJyvtTFVmVhcMLU6v5fEb/ok4wyqtNU=
 golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550 h1:ObdrDkeb4kJdCP557AjRjq69pTHfNouLtWZG7j9rPN8=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -216,7 +219,10 @@ golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHl
 golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
 golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
+golang.org/x/mod v0.1.0 h1:sfUMP1Gu8qASkorDVjnMuvgJzwFbTZSeXFiGBYAVdl4=
 golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY=
+golang.org/x/mod v0.4.0 h1:8pl+sMODzuvGJkmj2W4kZihvVb5mKm8pB/X44PIQHv8=
+golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181023162649-9b4f9f5ad519/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -281,7 +287,12 @@ golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtn
 golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191112195655-aa38f8e97acc h1:NCy3Ohtk6Iny5V/reW2Ktypo4zIpWBdRJ1uFMjBxdg8=
 golang.org/x/tools v0.0.0-20191112195655-aa38f8e97acc/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e h1:aZzprAO9/8oim3qStq3wc1Xuxx4QmAGriC4VU4ojemQ=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20201224043029-2b0845dc783e h1:4nW4NLDYnU28ojHaHO8OVxFHk/aQ33U01a9cjED+pzE=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898 h1:/atklqdjdhuosWIl6AIbOeHJjicWYPqR9bpxqxYG2pA=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEtwE=
 google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M=
 google.golang.org/api v0.8.0/go.mod h1:o4eAsZoiT+ibD93RtjEohWalFOjRDx6CVaqeizhEnKg=
diff --git a/license-eye/pkg/config/config.go b/license-eye/pkg/config/config.go
index 3b7c417..6db18be 100644
--- a/license-eye/pkg/config/config.go
+++ b/license-eye/pkg/config/config.go
@@ -21,6 +21,7 @@ import (
 	"io/ioutil"
 
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
+	"github.com/apache/skywalking-eyes/license-eye/pkg/deps"
 	"github.com/apache/skywalking-eyes/license-eye/pkg/header"
 
 	"gopkg.in/yaml.v3"
@@ -28,6 +29,7 @@ import (
 
 type Config struct {
 	Header header.ConfigHeader `yaml:"header"`
+	Deps   deps.ConfigDeps     `yaml:"dependency"`
 }
 
 // Parse reads and parses the header check configurations in config file.
@@ -44,5 +46,9 @@ func (config *Config) Parse(file string) error {
 		return err
 	}
 
+	if err := config.Deps.Finalize(file); err != nil {
+		return err
+	}
+
 	return nil
 }
diff --git a/license-eye/pkg/config/config.go b/license-eye/pkg/deps/config.go
similarity index 58%
copy from license-eye/pkg/config/config.go
copy to license-eye/pkg/deps/config.go
index 3b7c417..b682aa4 100644
--- a/license-eye/pkg/config/config.go
+++ b/license-eye/pkg/deps/config.go
@@ -1,3 +1,4 @@
+//
 // Licensed to Apache Software Foundation (ASF) under one or more contributor
 // license agreements. See the NOTICE file distributed with
 // this work for additional information regarding copyright
@@ -14,34 +15,24 @@
 // KIND, either express or implied.  See the License for the
 // specific language governing permissions and limitations
 // under the License.
-//
-package config
+package deps
 
 import (
-	"io/ioutil"
-
-	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg/header"
-
-	"gopkg.in/yaml.v3"
+	"path/filepath"
 )
 
-type Config struct {
-	Header header.ConfigHeader `yaml:"header"`
+type ConfigDeps struct {
+	Files []string `yaml:"files"`
 }
 
-// Parse reads and parses the header check configurations in config file.
-func (config *Config) Parse(file string) error {
-	logger.Log.Infoln("Loading configuration from file:", file)
-
-	if bytes, err := ioutil.ReadFile(file); err != nil {
-		return err
-	} else if err := yaml.Unmarshal(bytes, config); err != nil {
+func (config *ConfigDeps) Finalize(configFile string) error {
+	configFileAbsPath, err := filepath.Abs(configFile)
+	if err != nil {
 		return err
 	}
 
-	if err := config.Header.Finalize(); err != nil {
-		return err
+	for i, file := range config.Files {
+		config.Files[i] = filepath.Join(filepath.Dir(configFileAbsPath), file)
 	}
 
 	return nil
diff --git a/license-eye/pkg/deps/golang.go b/license-eye/pkg/deps/golang.go
new file mode 100644
index 0000000..cea090f
--- /dev/null
+++ b/license-eye/pkg/deps/golang.go
@@ -0,0 +1,149 @@
+//
+// Licensed to Apache Software Foundation (ASF) under one or more contributor
+// license agreements. See the NOTICE file distributed with
+// this work for additional information regarding copyright
+// ownership. Apache Software Foundation (ASF) licenses this file to you under
+// the Apache License, Version 2.0 (the "License"); you may
+// not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied.  See the License for the
+// specific language governing permissions and limitations
+// under the License.
+package deps
+
+import (
+	"go/build"
+	"io/ioutil"
+	"path/filepath"
+	"regexp"
+
+	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
+	"golang.org/x/mod/modfile"
+	"golang.org/x/tools/go/packages"
+)
+
+type GoModeResolver struct {
+	Resolver
+}
+
+func (resolver *GoModeResolver) CanResolve(file string) bool {
+	base := filepath.Base(file)
+	logger.Log.Debugln("Base name:", base)
+	return base == "go.mod"
+}
+
+// Resolve resolves licenses of all dependencies declared in the go.mod file.
+func (resolver *GoModeResolver) Resolve(goModFile string, report *Report) error {
+	content, err := ioutil.ReadFile(goModFile)
+	if err != nil {
+		return err
+	}
+
+	file, err := modfile.Parse(goModFile, content, nil)
+	if err != nil {
+		return err
+	}
+
+	logger.Log.Debugln("Resolving module:", file.Module.Mod)
+
+	requiredPkgNames := make([]string, len(file.Require))
+	for i, require := range file.Require {
+		requiredPkgNames[i] = require.Mod.Path
+	}
+
+	logger.Log.Debugln("Required packages:", requiredPkgNames)
+
+	if err := resolver.ResolvePackages(requiredPkgNames, report); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// ResolvePackages resolves the licenses of the given packages.
+func (resolver *GoModeResolver) ResolvePackages(pkgNames []string, report *Report) error {
+	requiredPkgs, err := packages.Load(&packages.Config{
+		Mode: packages.NeedName | packages.NeedFiles | packages.NeedCompiledGoFiles | packages.NeedImports | packages.NeedDeps,
+	}, pkgNames...)
+
+	if err != nil {
+		return err
+	}
+
+	packages.Visit(requiredPkgs, func(p *packages.Package) bool {
+		err := resolver.ResolvePackageLicense(p, report)
+		if err != nil {
+			logger.Log.Warnln("Failed to resolve the license of dependency:", p.Name, err)
+		}
+		return true
+	}, nil)
+
+	return nil
+}
+
+var possibleLicenseFileName = regexp.MustCompile(`(?i)^LICENSE|LICENCE(\.txt)?$`)
+
+func (resolver *GoModeResolver) ResolvePackageLicense(p *packages.Package, report *Report) error {
+	var filesInPkg []string
+	if len(p.GoFiles) > 0 {
+		filesInPkg = p.GoFiles
+	} else if len(p.CompiledGoFiles) > 0 {
+		filesInPkg = p.CompiledGoFiles
+	} else if len(p.OtherFiles) > 0 {
+		filesInPkg = p.OtherFiles
+	}
+
+	if len(filesInPkg) == 0 {
+		return nil
+	}
+
+	absPath, err := filepath.Abs(filesInPkg[0])
+	if err != nil {
+		return err
+	}
+	dir := filepath.Dir(absPath)
+
+	for {
+		files, err := ioutil.ReadDir(dir)
+		if err != nil {
+			return err
+		}
+		for _, info := range files {
+			if !possibleLicenseFileName.MatchString(info.Name()) {
+				continue
+			}
+			licenseFilePath := filepath.Join(dir, info.Name())
+			content, err := ioutil.ReadFile(licenseFilePath)
+			if err != nil {
+				return err
+			}
+			report.Resolve(&Result{
+				Dependency:      p.PkgPath,
+				LicenseContent:  string(content),
+				LicenseFilePath: licenseFilePath,
+				LicenseSpdxID:   "", // TODO: identify the SPDX ID
+			})
+			return nil
+		}
+		if resolver.shouldStopAt(dir) {
+			break
+		}
+		dir = filepath.Dir(dir)
+	}
+	return nil
+}
+
+func (resolver *GoModeResolver) shouldStopAt(dir string) bool {
+	for _, srcDir := range build.Default.SrcDirs() {
+		if srcDir == dir {
+			return true
+		}
+	}
+	return false
+}
diff --git a/license-eye/commands/header/header.go b/license-eye/pkg/deps/resolve.go
similarity index 58%
rename from license-eye/commands/header/header.go
rename to license-eye/pkg/deps/resolve.go
index 8786217..86fbe96 100644
--- a/license-eye/commands/header/header.go
+++ b/license-eye/pkg/deps/resolve.go
@@ -1,3 +1,4 @@
+//
 // Licensed to Apache Software Foundation (ASF) under one or more contributor
 // license agreements. See the NOTICE file distributed with
 // this work for additional information regarding copyright
@@ -14,27 +15,34 @@
 // KIND, either express or implied.  See the License for the
 // specific language governing permissions and limitations
 // under the License.
-//
-package header
+package deps
 
 import (
-	"github.com/spf13/cobra"
+	"fmt"
 )
 
-var (
-	// cfgFile is the config path to the config file of header command.
-	cfgFile string
-)
+type Resolver interface {
+	CanResolve(string) bool
+	Resolve(string, *Report) error
+}
 
-var Header = &cobra.Command{
-	Use:     "header",
-	Aliases: []string{"h"},
-	Short:   "License header related commands; e.g. check, fix, etc.",
-	Long:    "`header` command walks the specified paths recursively and checks if the specified files have the license header in the config file.",
+var Resolvers = []Resolver{
+	new(GoModeResolver),
 }
 
-func init() {
-	Header.PersistentFlags().StringVarP(&cfgFile, "config", "c", ".licenserc.yaml", "the config file")
-	Header.AddCommand(CheckCommand)
-	Header.AddCommand(FixCommand)
+func Resolve(config *ConfigDeps, report *Report) error {
+	for _, file := range config.Files {
+		for _, resolver := range Resolvers {
+			if !resolver.CanResolve(file) {
+				continue
+			}
+			if err := resolver.Resolve(file, report); err != nil {
+				return err
+			}
+			return nil
+		}
+		return fmt.Errorf("unable to find a resolver to resolve dependency declaration file: %v", file)
+	}
+
+	return nil
 }
diff --git a/license-eye/pkg/config/config.go b/license-eye/pkg/deps/result.go
similarity index 54%
copy from license-eye/pkg/config/config.go
copy to license-eye/pkg/deps/result.go
index 3b7c417..bfea534 100644
--- a/license-eye/pkg/config/config.go
+++ b/license-eye/pkg/deps/result.go
@@ -1,3 +1,4 @@
+//
 // Licensed to Apache Software Foundation (ASF) under one or more contributor
 // license agreements. See the NOTICE file distributed with
 // this work for additional information regarding copyright
@@ -14,35 +15,34 @@
 // KIND, either express or implied.  See the License for the
 // specific language governing permissions and limitations
 // under the License.
-//
-package config
-
-import (
-	"io/ioutil"
+package deps
 
-	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg/header"
+type SpdxID string
 
-	"gopkg.in/yaml.v3"
+const (
+	Unknown string = "Unknown"
 )
 
-type Config struct {
-	Header header.ConfigHeader `yaml:"header"`
+// Result is a single item that represents a resolved dependency license.
+type Result struct {
+	Dependency      string
+	LicenseFilePath string
+	LicenseContent  string
+	LicenseSpdxID   string
 }
 
-// Parse reads and parses the header check configurations in config file.
-func (config *Config) Parse(file string) error {
-	logger.Log.Infoln("Loading configuration from file:", file)
-
-	if bytes, err := ioutil.ReadFile(file); err != nil {
-		return err
-	} else if err := yaml.Unmarshal(bytes, config); err != nil {
-		return err
-	}
+// Report is a collection of resolved Result.
+type Report struct {
+	Resolved []*Result
+	Skipped  []*Result
+}
 
-	if err := config.Header.Finalize(); err != nil {
-		return err
-	}
+// Resolve marks the dependency's license is resolved.
+func (report *Report) Resolve(result *Result) {
+	report.Resolved = append(report.Resolved, result)
+}
 
-	return nil
+// Skip marks the dependency's license is skipped for some reasons.
+func (report *Report) Skip(result *Result) {
+	report.Skipped = append(report.Skipped, result)
 }
diff --git a/license-eye/pkg/header/check.go b/license-eye/pkg/header/check.go
index ff59b34..0bdccb5 100644
--- a/license-eye/pkg/header/check.go
+++ b/license-eye/pkg/header/check.go
@@ -26,7 +26,6 @@ import (
 	"strings"
 
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg"
 	lcs "github.com/apache/skywalking-eyes/license-eye/pkg/license"
 
 	"github.com/bmatcuk/doublestar/v2"
@@ -39,7 +38,7 @@ var (
 )
 
 // Check checks the license headers of the specified paths/globs.
-func Check(config *ConfigHeader, result *pkg.Result) error {
+func Check(config *ConfigHeader, result *Result) error {
 	for _, pattern := range config.Paths {
 		if err := checkPattern(pattern, result, config); err != nil {
 			return err
@@ -51,7 +50,7 @@ func Check(config *ConfigHeader, result *pkg.Result) error {
 
 var seen = make(map[string]bool)
 
-func checkPattern(pattern string, result *pkg.Result, config *ConfigHeader) error {
+func checkPattern(pattern string, result *Result, config *ConfigHeader) error {
 	paths, err := doublestar.Glob(pattern)
 
 	if err != nil {
@@ -72,7 +71,7 @@ func checkPattern(pattern string, result *pkg.Result, config *ConfigHeader) erro
 	return nil
 }
 
-func checkPath(path string, result *pkg.Result, config *ConfigHeader) error {
+func checkPath(path string, result *Result, config *ConfigHeader) error {
 	defer func() { seen[path] = true }()
 
 	if yes, err := config.ShouldIgnore(path); yes || seen[path] || err != nil {
@@ -105,7 +104,7 @@ func checkPath(path string, result *pkg.Result, config *ConfigHeader) error {
 }
 
 // CheckFile checks whether or not the file contains the configured license header.
-func CheckFile(file string, config *ConfigHeader, result *pkg.Result) error {
+func CheckFile(file string, config *ConfigHeader, result *Result) error {
 	if yes, err := config.ShouldIgnore(file); yes || err != nil {
 		if !seen[file] {
 			result.Ignore(file)
diff --git a/license-eye/pkg/header/check_test.go b/license-eye/pkg/header/check_test.go
index cbd898b..b5e8148 100644
--- a/license-eye/pkg/header/check_test.go
+++ b/license-eye/pkg/header/check_test.go
@@ -24,7 +24,6 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/apache/skywalking-eyes/license-eye/pkg"
 	"gopkg.in/yaml.v3"
 )
 
@@ -49,7 +48,7 @@ func TestCheckFile(t *testing.T) {
 	type args struct {
 		name       string
 		file       string
-		result     *pkg.Result
+		result     *Result
 		wantErr    bool
 		hasFailure bool
 	}
@@ -65,7 +64,7 @@ func TestCheckFile(t *testing.T) {
 			cases = append(cases, args{
 				name:       file,
 				file:       file,
-				result:     &pkg.Result{},
+				result:     &Result{},
 				wantErr:    false,
 				hasFailure: false,
 			})
@@ -100,7 +99,7 @@ func TestCheckFileFailure(t *testing.T) {
 	type args struct {
 		name       string
 		file       string
-		result     *pkg.Result
+		result     *Result
 		wantErr    bool
 		hasFailure bool
 	}
@@ -116,7 +115,7 @@ func TestCheckFileFailure(t *testing.T) {
 			cases = append(cases, args{
 				name:       file,
 				file:       file,
-				result:     &pkg.Result{},
+				result:     &Result{},
 				wantErr:    false,
 				hasFailure: true,
 			})
diff --git a/license-eye/pkg/header/fix.go b/license-eye/pkg/header/fix.go
index fb8413c..7e6d776 100644
--- a/license-eye/pkg/header/fix.go
+++ b/license-eye/pkg/header/fix.go
@@ -26,13 +26,12 @@ import (
 	"strings"
 
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg"
 	"github.com/apache/skywalking-eyes/license-eye/pkg/comments"
 )
 
 // Fix adds the configured license header to the given file.
-func Fix(file string, config *ConfigHeader, result *pkg.Result) error {
-	var r pkg.Result
+func Fix(file string, config *ConfigHeader, result *Result) error {
+	var r Result
 	if err := CheckFile(file, config, &r); err != nil || !r.HasFailure() {
 		logger.Log.Warnln("Try to fix a valid file, do nothing:", file)
 		return err
@@ -51,7 +50,7 @@ func Fix(file string, config *ConfigHeader, result *pkg.Result) error {
 	return nil
 }
 
-func InsertComment(file string, style *comments.CommentStyle, config *ConfigHeader, result *pkg.Result) error {
+func InsertComment(file string, style *comments.CommentStyle, config *ConfigHeader, result *Result) error {
 	stat, err := os.Stat(file)
 	if err != nil {
 		return err
diff --git a/license-eye/pkg/result.go b/license-eye/pkg/header/result.go
similarity index 99%
rename from license-eye/pkg/result.go
rename to license-eye/pkg/header/result.go
index 9333671..068fe75 100644
--- a/license-eye/pkg/result.go
+++ b/license-eye/pkg/header/result.go
@@ -15,7 +15,7 @@
 // specific language governing permissions and limitations
 // under the License.
 //
-package pkg
+package header
 
 import (
 	"fmt"
diff --git a/license-eye/pkg/review/header.go b/license-eye/pkg/review/header.go
index 4ad84e7..7c5b790 100644
--- a/license-eye/pkg/review/header.go
+++ b/license-eye/pkg/review/header.go
@@ -30,7 +30,6 @@ import (
 	"strings"
 
 	"github.com/apache/skywalking-eyes/license-eye/internal/logger"
-	"github.com/apache/skywalking-eyes/license-eye/pkg"
 	comments2 "github.com/apache/skywalking-eyes/license-eye/pkg/comments"
 	config2 "github.com/apache/skywalking-eyes/license-eye/pkg/config"
 	header2 "github.com/apache/skywalking-eyes/license-eye/pkg/header"
@@ -59,7 +58,7 @@ var (
 )
 
 func init() {
-	if os.Getenv("GITHUB_TOKEN") == "" {
+	if os.Getenv("INPUT_GITHUB_TOKEN") == "" {
 		logger.Log.Warnln("GITHUB_TOKEN is not set, license-eye won't comment on the pull request")
 		return
 	}
@@ -110,7 +109,7 @@ func init() {
 }
 
 // Header reviews the license header, including suggestions on the pull request and an overview of the checks.
-func Header(result *pkg.Result, config *config2.Config) error {
+func Header(result *header2.Result, config *config2.Config) error {
 	if !result.HasFailure() || !IsPR() || gh == nil || config.Header.Comment == header2.Never {
 		return nil
 	}
@@ -171,7 +170,7 @@ func Header(result *pkg.Result, config *config2.Config) error {
 	return nil
 }
 
-func tryReview(result *pkg.Result, config *config2.Config, comments []*github.DraftReviewComment) error {
+func tryReview(result *header2.Result, config *config2.Config, comments []*github.DraftReviewComment) error {
 	tryBestEffortToComment := func() error {
 		if err := doReview(result, comments); err != nil {
 			logger.Log.Warnln("Failed to create review comment, fallback to a plain comment:", err)
@@ -193,7 +192,7 @@ func tryReview(result *pkg.Result, config *config2.Config, comments []*github.Dr
 	return nil
 }
 
-func doReview(result *pkg.Result, comments []*github.DraftReviewComment) error {
+func doReview(result *header2.Result, comments []*github.DraftReviewComment) error {
 	logger.Log.Debugln("Comments:", comments)
 
 	c := Markdown(result)
@@ -257,7 +256,7 @@ func IsPR() bool {
 }
 
 // TODO add fixing guide
-func Markdown(result *pkg.Result) string {
+func Markdown(result *header2.Result) string {
 	return fmt.Sprintf(`
 <!-- %s -->
 [license-eye](https://github.com/apache/skywalking-eyes/tree/main/license-eye) has totally checked %d files.