ci: add automated dependency license checking

ReadAlongs · Jan 23, 2025 · 1a73c5d · 1a73c5d
1 parent b4facad
commit 1a73c5d
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/end-to-end-tests.yml b/.github/workflows/end-to-end-tests.yml
@@ -23,6 +23,15 @@ jobs:
       - name: Install everything
         run: npm install
 
+      - name: Automated license checking
+        env:
+          PROD_LICENSES: "MIT;BSD;0BSD;BSD-2-Clause;BSD-3-Clause;ISC;Apache-2.0"
+          DEV_LICENSES: "Python-2.0;CC0-1.0;CC-BY-3.0;CC-BY-4.0;Apache 2.0;Unlicense;BlueOak-1.0.0"
+          OK_BUT_NOT_AUTODETECTED: "@nxext/[email protected];[email protected]"
+        run: |
+          npx license-checker --summary --production --onlyAllow "$PROD_LICENSES" --excludePackages "$OK_BUT_NOT_AUTODETECTED"
+          npx license-checker --summary --onlyAllow "$DEV_LICENSES;$PROD_LICENSES" --excludePackages "$OK_BUT_NOT_AUTODETECTED"
+
       - name: Cypress run for web-component
         uses: cypress-io/github-action@v6
         with: