Allow permissive licenses only for PyAnsys packages (#48)

* Allow certain licenses

* First trial - get all deps types

* Separate workflows

* Comment everything

* Setup a name for the job

* Test

* Added permission

* Remove specific permissions

* Remove options

* Typo

* Try with a different version

* Test

* Typo

* Dependency reviewer cleanup

* Dependency reviewer cleanup

* Only on pull request

Author: RobPasMue

.github/workflows/ci-build.yml

@@ -131,7 +131,7 @@ jobs:
   extras-import:
     name: Build extras PyAnsys packages
     runs-on: ${{ matrix.os }}
-    needs: [style, core-import]
+    needs: [core-import]
     strategy:
       matrix:
         os: [windows-latest, ubuntu-latest, macos-latest]
@@ -256,7 +256,7 @@ jobs:
   release:
     name: Release project
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags')
-    needs: [docs-build, core-import, package]
+    needs: [package]
     runs-on: ubuntu-latest
     steps:
       - name: Set up Python

.github/workflows/dependency-reviewer.yml

@@ -0,0 +1,22 @@
+name: Dependency Reviewer
+
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    name: Dependency Reviewer
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v2
+        with:
+          # Possible values: "critical", "high", "moderate", "low"
+          fail-on-severity: low
+          # Possible values: Any `spdx_id` value(s) from https://docs.github.com/en/rest/licenses
+          allow-licenses: Apache 2.0, Python Software Foundation License , Historical Permission Notice and Disclaimer (HPND), BSD-3-Clause, MIT