fix: add step for install and run fossa

Signed-off-by: Xoán Mallón <[email protected]>

.github/workflows/fossa.yml

@@ -16,12 +16,6 @@ jobs:
         with:
           go-version: 1.17
       - run: go version
-      # Runs a set of commands to initialize and analyze with FOSSA
-      - name: run FOSSA analysis
-        env:
-          FOSSA_API_KEY: 'b0bfb312cf03c6c63752afaa5c98c7c8'
-        run: |
-          export GOPATH=$HOME/go
-          export PATH=$PATH:$(go env GOPATH)/bin
-          fossa init
-          fossa analyze
+      - uses: fossas/fossa-action@main
+        with:
+          api-key: 'b0bfb312cf03c6c63752afaa5c98c7c8'

tools/build-tools.Dockerfile

@@ -65,9 +65,6 @@ ENV GOROOT=/usr/local/go
 ENV GOPATH=/go
 ENV PATH=${PATH}:${GOPATH}/bin
 
-# Install FOSSA tooling, only working in linux/amd64 for the moment. Related issue: https://github.com/fossas/fossa-cli/issues/662
-RUN ARCH=$(dpkg --print-architecture) && if [ ${ARCH} == "amd64" ]; then curl -LO -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh && bash install-latest.sh && rm install-latest.sh; fi
-
 # Install gh
 RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg && \
     echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | tee /etc/apt/sources.list.d/github-cli.list > /dev/null && \