Add fossa analyze script (#479)

Author: meiliang86

.buildkite/pipeline.yml

@@ -1,4 +1,9 @@
 steps:
+  - label: "fossa analyze"
+    agents:
+      queue: "init"
+      docker: "*"
+    command: ".buildkite/scripts/fossa.sh"
   - label: ":java: Unit test with test services"
     agents:
       queue: "workers"
@@ -28,4 +33,4 @@ steps:
       - docker-compose#v3.0.0:
           run: unit-test-docker-sticky-off
           config: docker/buildkite/docker-compose.yaml
-  - wait
+  - wait

.buildkite/scripts/fossa.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+set -exo pipefail
+
+curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install.sh | bash -s -- -b ~/
+
+~/fossa init
+~/fossa analyze
+
+# Capture the exit status
+EXIT_STATUS=$?
+
+echo "fossa script exits with status $EXIT_STATUS"
+exit $EXIT_STATUS

.fossa.yml

@@ -0,0 +1,11 @@
+version: 2
+cli:
+  server: https://app.fossa.com
+  fetcher: custom
+  project: git@github.com:uber/cadence-java-client.git
+analyze:
+  modules:
+  - name: .
+    type: gradle
+    target: ':'
+    path: .