ci: add licenses.yml workflow & deny.yml to check licenses using cargo-deny

Author: Alenar

.github/workflows/licenses.yml

@@ -0,0 +1,68 @@
+name: Check Licenses
+
+on:
+  push:
+    branches:
+      - "main"
+      - "hotfix**"
+    paths:
+      - "**/Cargo.lock"
+      - "**/Cargo.toml"
+      - "**/deny.toml"
+  pull_request:
+    types: [opened, reopened, synchronize]
+    paths:
+      - "**/Cargo.lock"
+      - "**/Cargo.toml"
+      - "**/deny.toml"
+    branches-ignore:
+      - "hotfix**" # hotfix are handled by the push trigger
+
+concurrency:
+  group: licences-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  cargo-deny:
+    runs-on: ubuntu-22.04
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          ## Note about deny command options:
+          ## `--no-default-features` is only available when running against one crate
+
+          # Global
+          - deny-args: ""
+            manifest-path: ./Cargo.toml
+          - deny-args: "--all-features"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features rug-backend"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features num-integer-backend"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features jemallocator"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features bundle_tls"
+            manifest-path: ./Cargo.toml
+
+          # Mithril Client
+          - deny-args: ""
+            manifest-path: mithril-client/Cargo.toml
+          - deny-args: "--all-features"
+            manifest-path: mithril-client/Cargo.toml
+          - deny-args: "--no-default-features"
+            manifest-path: mithril-client/Cargo.toml
+
+          # Mithril Client WASM
+          - deny-args: ""
+            manifest-path: mithril-client-wasm/Cargo.toml
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: EmbarkStudios/cargo-deny-action@v2
+        with:
+          command: check licenses
+          arguments: ${{ matrix.deny-args }}
+          log-level: error
+          manifest-path: ${{ matrix.manifest-path }}

deny.toml

@@ -0,0 +1,33 @@
+# Cargo-deny configuration file
+
+[graph]
+targets = [
+    "aarch64-apple-darwin",
+    "aarch64-unknown-linux-gnu",
+    "x86_64-pc-windows-msvc",
+    "x86_64-unknown-linux-gnu",
+    "x86_64-unknown-linux-musl",
+    "wasm32-unknown-unknown"
+]
+
+[licenses]
+# We want really high confidence when inferring licenses from text
+confidence-threshold = 0.93
+# This list of allowed licenses is not final and is currently under legal investigation. It may be updated in the future.
+allow = [
+    "Apache-2.0",
+    "BlueOak-1.0.0",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "bzip2-1.0.6",
+    "CC0-1.0",
+    "CDLA-Permissive-2.0",
+    "ISC",
+    "LGPL-3.0-or-later",
+    "MIT",
+    "MIT-0",
+    "MPL-2.0",
+    "Unicode-3.0",
+    "Zlib",
+]
+