feat: Added license check (#4368)

* Added license checker

* License check fix

* add license check run

* Added github action for license check

* License check update

* Added experimental flag

* Removed unused target

Author: denis256

.github/pull_request_template.md

@@ -10,9 +10,11 @@ Fixes #000.
 
 Read the [Gruntwork contribution guidelines](https://gruntwork.notion.site/Gruntwork-Coding-Methodology-02fdcd6e4b004e818553684760bf691e).
 
+- [ ] I authored this code entirely myself
+- [ ] I am submitting code based on open source software (e.g. MIT, MPL-2.0, Apache)]
+- [ ] I am adding or upgrading a dependency or adapted code and confirm it has a compatible open source license
 - [ ] Update the docs.
 - [ ] Run the relevant tests successfully, including pre-commit checks.
-- [ ] Ensure any 3rd party code adheres with our [license policy](https://www.notion.so/gruntwork/Gruntwork-licenses-and-open-source-usage-policy-f7dece1f780341c7b69c1763f22b1378) or delete this line if its not applicable.
 - [ ] Include release notes. If this PR is backward incompatible, include a migration guide.
 
 ## Release Notes (draft)

.github/scripts/setup/generate-mocks.sh

@@ -2,5 +2,4 @@
 
 set -euo pipefail
 
-make install-mock-tools
 make generate-mocks

.github/workflows/build-no-proxy.yml

@@ -37,6 +37,7 @@ jobs:
         uses: jdx/mise-action@v2
         with:
           version: 2025.4.4
+          experimental: true
         env:
           # Adding token here to reduce the likelihood of hitting rate limit issues.
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/build.yml

@@ -37,6 +37,7 @@ jobs:
         uses: jdx/mise-action@v2
         with:
           version: 2025.4.4
+          experimental: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/codespell.yml

@@ -28,6 +28,7 @@ jobs:
         uses: jdx/mise-action@v2
         with:
           version: 2025.4.4
+          experimental: true
           mise_toml: |
             [tools]
             python = "3.13.3"

.github/workflows/license-check.yml

@@ -0,0 +1,42 @@
+name: License Check
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  license-check:
+    name: License Check
+    runs-on: ubuntu-latest
+    env:
+      MISE_PROFILE: cicd
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Use mise to install dependencies
+        uses: jdx/mise-action@v2
+        with:
+          version: 2025.4.4
+          experimental: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Run License Check
+        id: run-license-check
+        run: |
+          set -o pipefail
+          make license-check | tee license-check.log
+        shell: bash
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload License Check Report
+        uses: actions/upload-artifact@v4
+        with:
+          name: license-check-report-ubuntu
+          path: license-check.log 

.github/workflows/lint.yml

@@ -18,6 +18,7 @@ jobs:
       uses: jdx/mise-action@v2
       with:
         version: 2025.4.4
+        experimental: true
       env:
         # Adding token here to reduce the likelihood of hitting rate limit issues.
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/strict-lint.yml

@@ -15,6 +15,7 @@ jobs:
       uses: jdx/mise-action@v2
       with:
         version: 2025.4.4
+        experimental: true
       env:
         # Adding token here to reduce the likelihood of hitting rate limit issues.
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -17,4 +17,5 @@ terragrunt
 .terragrunt-stack
 .devcontainer.json
 .cursor/
-.env
+.env
+.licensei.cache

.licensei.toml

@@ -0,0 +1,19 @@
+approved = [
+  "apache-2.0",
+  "bsd-2-clause",
+  "bsd-3-clause",
+  "isc",
+  "mpl-2.0",
+  "mit",
+]
+
+ignored = [
+  "github.com/terraform-linters/tflint-plugin-sdk",
+  "github.com/owenrumney/go-sarif",
+  "github.com/davecgh/go-spew"
+]
+
+
+[header]
+ignorePaths = ["vendor", ".gen"]
+ignoreFiles = ["mock_*.go", "*_gen.go"]