Don't scan on PRs

Author: Calvin A. Allen

.github/workflows/build_image.yml

@@ -32,4 +32,3 @@ jobs:
                       BROWSER_TRUST_KEY=${{ secrets.BROWSER_TRUST_KEY }}
                       BROWSER_AGENT_ID=${{ secrets.BROWSER_AGENT_ID }}
                       BROWSER_APPLICATION_ID=${{ secrets.BROWSER_APPLICATION_ID }}
-                      FOSSA_API_KEY=${{ secrets.FOSSA_API_KEY }}

Dockerfile

@@ -41,8 +41,8 @@ ENV FOSSA_API_KEY=$FOSSA_API_KEY
 RUN --mount=type=cache,target=/root/.gradle ./gradlew downloadNewRelicAgent --console=plain --info --no-daemon --no-watch-fs
 RUN --mount=type=cache,target=/root/.gradle ./gradlew build --console=plain --info --no-daemon --no-watch-fs
 
-RUN curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash
-RUN fossa analyze
+RUN if [[ -z "$FOSSA_API_KEY" ]] ; then echo -- SKIPPING FOSSA CLI DOWNLOAD ; else curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash; fi
+RUN if [[ -z "$FOSSA_API_KEY" ]] ; then echo -- SKIPPING FOSSA SCAN ; else fossa analyze; fi
 
 FROM base AS final
 WORKDIR /app