ci: bring Snap USNs back

Ref. https://bugs.launchpad.net/snapstore-server/+bug/2004008

While that gets resolved, ignore the extra packages when checking for
security notices.

Signed-off-by: Michał Sawicz (Saviq) <michal@sawicz.net>

.github/workflows/scripts/check_usns.py

@@ -34,6 +34,7 @@ STORE_URL = "https://api.snapcraft.io/api/v1/snaps" "/details/{snap}?channel={ch
 STORE_HEADERS = {"X-Ubuntu-Series": "16", "X-Ubuntu-Architecture": "{arch}"}
 
 CHECK_NOTICES_PATH = "/snap/bin/review-tools.check-notices"
+CHECK_NOTICES_ARGS = ["--ignore-pockets", "esm-apps"]
 
 
 def get_store_snap(processor, snap, channel):
@@ -76,7 +77,7 @@ def check_snap_notices(store_snaps):
         )
 
         try:
-            notices = subprocess.check_output([CHECK_NOTICES_PATH] + snaps, encoding="UTF-8")
+            notices = subprocess.check_output([CHECK_NOTICES_PATH] + CHECK_NOTICES_ARGS + snaps, encoding="UTF-8")
             logger.debug("Got check_notices output:\n%s", notices)
         except subprocess.CalledProcessError as e:
             logger.error("Failed to check notices:\n%s", e.output)

.github/workflows/snap_usns.yml

@@ -1,9 +1,9 @@
 name: SnapUSNs
 
 on:
-  workflow_dispatch
-#  schedule:
-#  - cron: '0 5 * * *'
+  workflow_dispatch:
+  schedule:
+  - cron: '0 5 * * *'
 
 jobs:
   CheckUSNs:
@@ -25,7 +25,7 @@ jobs:
 
     - name: Install Snap dependencies
       run: |
-        sudo snap install review-tools
+        sudo snap install review-tools --edge
 
     - name: Set up Launchpad credentials
       uses: DamianReeves/write-file-action@v1.0