diff --git a/.github/workflows/check-compliance.yaml b/.github/workflows/check-compliance.yaml deleted file mode 100644 index 01e537c12..000000000 --- a/.github/workflows/check-compliance.yaml +++ /dev/null @@ -1,21 +0,0 @@ -name: check license compliance - -on: - pull_request: - branches: - - dev - -jobs: - compliance: - runs-on: ubuntu-latest - steps: - - name: Checkout code - uses: actions/checkout@v4 - # Compliance - - name: Advance Security Policy as Code - uses: advanced-security/policy-as-code@v2.7.3 - with: - policy: it-at-m/policy-as-code - policy-path: default.yaml - token: ${{ secrets.GITHUB_TOKEN }} - argvs: "--disable-dependabot --disable-secret-scanning --disable-code-scanning --display" diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml new file mode 100644 index 000000000..79cbc676d --- /dev/null +++ b/.github/workflows/dependency-review.yaml @@ -0,0 +1,21 @@ +name: Dependency Review + +on: + pull_request: + branches: + - dev + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - name: Checkout code + uses: actions/checkout@v4 + - name: Dependency Review + uses: actions/dependency-review-action@v4 + with: + deny-licenses: >- + GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, + LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, LGPL-3.0-only, LGPL-3.0-or-later, + AGPL-1.0-only, AGPL-1.0-or-later, AGPL-3.0-only, AGPL-3.0-or-later + comment-summary-in-pr: on-failure