From 8e586748f88e291ad34385b7f9cede48eb886244 Mon Sep 17 00:00:00 2001 From: Alan Agius <17563226+alan-agius4@users.noreply.github.com> Date: Mon, 12 May 2025 11:38:48 +0000 Subject: [PATCH] fix(github-actions): explicitly allow renovate as a dependency through the license check Explicitly ignore `cookie-signature@1.2.2` for license check as this has a valid MIT license but the parser is failing with `License: LicenseRef-scancode-unknown-license-reference AND MIT` Note: this dependency is used in all the repos --- github-actions/linting/licenses/dependency-review-config.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/github-actions/linting/licenses/dependency-review-config.yml b/github-actions/linting/licenses/dependency-review-config.yml index 208ab0bf5..6bbb14844 100644 --- a/github-actions/linting/licenses/dependency-review-config.yml +++ b/github-actions/linting/licenses/dependency-review-config.yml @@ -20,3 +20,6 @@ allow-dependencies-licenses: # Renovate uses the AGPL-3.0 license, which we have determined is okay for our # usage. We do not however, want to depend on this license in general - 'pkg:npm/renovate' + # This is valid MIT but the parser is failing with an error + # `License: LicenseRef-scancode-unknown-license-reference AND MIT` + - 'pkg:npm/cookie-signature@1.2.2'