Inject the check licenses script to the workflow

Author: wildjames

.github/workflows/quality-checks.yml

@@ -54,6 +54,37 @@ jobs:
         run: |
           make install
 
+      - name: Check if project uses Poetry
+        id: check_poetry
+        run: |
+          if [ -f pyproject.toml ] && grep -q '\[tool.poetry\]' pyproject.toml; then
+            echo "uses_poetry=true" >> $GITHUB_OUTPUT
+          else
+            echo "uses_poetry=false" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Check licenses (Python)
+        if: steps.check_poetry.outputs.uses_poetry == 'true'
+        run: |
+          #!/bin/bash
+          set -euo pipefail
+
+          # Install pip-licenses if not already installed
+          if ! poetry run pip show pip-licenses > /dev/null 2>&1; then
+            poetry run pip install pip-licenses
+          fi
+
+          LICENSES=$(poetry run pip-licenses)
+          INCOMPATIBLE_LIBS=$(echo "$LICENSES" | grep 'GPL' || true)
+
+          if [[ -z $INCOMPATIBLE_LIBS ]]; then
+              exit 0
+          else
+              echo "The following libraries were found which are not compatible with this project's license:"
+              echo "$INCOMPATIBLE_LIBS"
+              exit 1
+          fi
+  
       - name: Generate and check SBOMs
         uses: NHSDigital/eps-action-sbom@v1
         with:
@@ -65,9 +96,6 @@ jobs:
           name: SBOMS
           path: '**/*sbom*.json'
 
-      - name: Check licenses
-        run: make check-licenses
-
       - name: Run linting for TypeScript and Python
         run: make lint