chore(ci): include allowed licenses file in dependency review workflow (#6618)

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Including license check in dependency review

* Makefiule

Author: leandrodamascena

.github/dependency-review-config.yml

@@ -0,0 +1,35 @@
+allow-licenses:
+  - 'Apache-1.1'
+  - 'Apache-2.0'
+  - 'MIT'
+  - 'MIT-0'
+  - 'MIT-CMU'
+  - 'MIT-enna'
+  - 'MIT-feh'
+  - 'MIT-Festival'
+  - 'MIT-Modern-Variant'
+  - 'MIT-open-group'
+  - 'MIT-testregex'
+  - 'MIT-Wu'
+  - 'BSD-1-Clause'
+  - 'BSD-2-Clause'
+  - 'BSD-2-Clause-Views'
+  - 'BSD-3-Clause'
+  - 'BSD-3-Clause-Attribution'
+  - 'BSD-3-Clause-Clear'
+  - 'BSD-3-Clause-flex'
+  - 'BSD-3-Clause-HP'
+  - 'BSD-3-Clause-LBNL'
+  - 'BSD-3-Clause-Modification'
+  - 'BSD-3-Clause-No-Military-License'
+  - 'BSD-3-Clause-No-Nuclear-License'
+  - 'BSD-3-Clause-No-Nuclear-License-2014'
+  - 'BSD-3-Clause-No-Nuclear-Warranty'
+  - 'BSD-3-Clause-Open-MPI'
+  - 'Python-2.0'
+  - 'Python-2.0.1'
+  - 'ISC'
+  - 'MPL-1.1'
+  - 'MPL-2.0'
+comment-summary-in-pr: on-failure
+fail-on-scopes: runtime

.github/workflows/dependency-review.yml

@@ -15,6 +15,9 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - name: 'Checkout Repository'
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

.github/workflows/quality_check.yml

@@ -61,8 +61,6 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
         run: make dev-quality-code
-      - name: Checking third-party library licenses
-        run: make check-licenses
       - name: Checking and enforcing format
         run: make format-check
       - name: Formatting and Linting

Makefile

@@ -1,4 +1,4 @@
-.PHONY: target dev format lint test coverage-html pr  build build-docs build-docs-website check-licenses
+.PHONY: target dev format lint test coverage-html pr  build build-docs build-docs-website
 .PHONY: docs-local security-baseline complexity-baseline release-prod release-test release
 
 target:
@@ -21,10 +21,6 @@ dev-gitpod:
 	poetry install --extras "all redis datamasking"
 	pre-commit install
 
-# Running licensecheck with zero to break the pipeline if there is an invalid license
-check-licenses:
-	poetry run licensecheck -u poetry:dev
-
 format-check:
 	poetry run ruff format aws_lambda_powertools tests examples --check
 
@@ -62,7 +58,7 @@ coverage-html:
 pre-commit:
 	pre-commit run --show-diff-on-failure
 
-pr: lint lint-docs mypy pre-commit check-licenses test security-baseline complexity-baseline
+pr: lint lint-docs mypy pre-commit test security-baseline complexity-baseline
 
 build: pr
 	poetry build