chore(fossa): migrate to cncf fossa (#17)

Signed-off-by: Oliver Bähler <[email protected]>

Author: oliverbaehler

.github/workflows/coverage.yml

@@ -17,28 +17,6 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  compliance:
-    name: "License Compliance"
-    runs-on: ubuntu-24.04
-    steps:
-      - name: "Checkout Code"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Check secret
-        id: checksecret
-        uses: ./.github/actions/exists
-        with:
-          value: ${{ secrets.FOSSA_API_KEY }}
-      - name: "Run FOSSA Scan"
-        if: steps.checksecret.outputs.result == 'true'
-        uses: fossas/fossa-action@93a52ecf7c3ac7eb40f5de77fd69b1a19524de94 # v1.5.0
-        with:
-          api-key: ${{ secrets.FOSSA_API_KEY }}
-      - name: "Run FOSSA Test"
-        if: steps.checksecret.outputs.result == 'true'
-        uses: fossas/fossa-action@93a52ecf7c3ac7eb40f5de77fd69b1a19524de94 # v1.5.0
-        with:
-          api-key: ${{ secrets.FOSSA_API_KEY }}
-          run-tests: true
   sast:
     name: "SAST"
     runs-on: ubuntu-24.04

.goreleaser.yml

@@ -33,8 +33,8 @@ release:
   footer: |
     **Full Changelog**: https://github.com/projectcapsule/{{ .ProjectName }}/compare/{{ .PreviousTag }}...{{ .Tag }}
 
-    [!TIP]
-    [Read this documentation](https://github.com/projectcapsule/{{ .ProjectName }}/blob/{{ .Tag }}/SECURITY.md) to see how you can verify an artifacts we are releasing.
+    > [!TIP]
+    > [Read this documentation](https://github.com/projectcapsule/{{ .ProjectName }}/blob/{{ .Tag }}/SECURITY.md) to see how you can verify an artifacts we are releasing.
 
     **Docker Images**
     - `ghcr.io/projectcapsule/{{ .ProjectName }}:{{ .Version }}`
@@ -46,9 +46,9 @@ release:
 
     **Kubernetes compatibility**
 
-    [!IMPORTANT]
-    Note that the Capsule project offers support only for the latest minor version of Kubernetes.
-    Backwards compatibility with older versions of Kubernetes and OpenShift is [offered by vendors](https://projectcapsule.dev/support/).
+    > [!IMPORTANT]
+    > Note that the Capsule project offers support only for the latest minor version of Kubernetes.
+    > Backwards compatibility with older versions of Kubernetes and OpenShift is [offered by vendors](https://projectcapsule.dev/support/).
 
     | Kubernetes version | Minimum required |
     |--------------------|------------------|

README.md

@@ -1,14 +1,15 @@
 # Capsule ❤️ Cortex
 
-[!IMPORTANT]
-This project is a permanent hard-fork of the [origin project](https://github.com/blind-oracle/cortex-tenant).
+> [!IMPORTANT]
+> This project is a permanent hard-fork of the [origin project](https://github.com/blind-oracle/cortex-tenant).
 
 ![Capsule Cortex](docs/images/logo.png)
 
 <p align="center">
 <a href="https://github.com/projectcapsule/cortex-proxy/releases/latest">
   <img alt="GitHub release (latest SemVer)" src="https://img.shields.io/github/v/release/projectcapsule/cortex-proxy?sort=semver">
 </a>
+<a href="https://app.fossa.com/projects/git%2Bgithub.com%2Fprojectcapsule%2Fcortex-proxy?ref=badge_small" alt="FOSSA Status"><img src="https://app.fossa.com/api/projects/git%2Bgithub.com%2Fprojectcapsule%2Fcortex-proxy.svg?type=small"/></a>
 <a href="https://artifacthub.io/packages/search?repo=cortex-proxy">
   <img src="https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/cortex-proxy" alt="Artifact Hub">
 </a>
@@ -42,3 +43,7 @@ See the [Documentation](docs/README.md) for more information on how to use this
 ## Support
 
 This addon is developed by the community. For enterprise support (production ready setup,tailor-made features) reach out to [Capsule Supporters](https://projectcapsule.dev/support/)
+
+## License
+
+[![FOSSA Status](https://app.fossa.com/api/projects/git%2Bgithub.com%2Fprojectcapsule%2Fcortex-proxy.svg?type=large)](https://app.fossa.com/projects/git%2Bgithub.com%2Fprojectcapsule%2Fcortex-proxy?ref=badge_large)