feat: Setup allowed licenses (#48)

skarllot · Jan 23, 2025 · 83d9451 · 83d9451
1 parent 46a9748
commit 83d9451
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -15,6 +15,8 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: 🛡️ Harden Runner
         uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
@@ -31,3 +33,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: 🔍 Dependency Review
         uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
+        with:
+          fail-on-severity: low
+          allow-licenses: GPL-3.0, AGPL-3.0, LGPL-3.0, Apache-2.0, MPL-2.0, MIT
+          comment-summary-in-pr: always