Merge pull request #2848 from input-output-hk/djo/2746/ci/add-license-check

ci: Check external crates licenses compatibility

Author: Alenar

.github/workflows/ci.yml

@@ -333,6 +333,50 @@ jobs:
         if: success() || failure()
         run: make check-format
 
+  licenses:
+    runs-on: ubuntu-22.04
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          ## Note about deny command options:
+          ## `--no-default-features` is only available when running against one crate
+
+          # Global
+          - deny-args: ""
+            manifest-path: ./Cargo.toml
+          - deny-args: "--all-features"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features rug-backend"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features num-integer-backend"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features jemallocator"
+            manifest-path: ./Cargo.toml
+          - deny-args: "--features bundle_tls"
+            manifest-path: ./Cargo.toml
+
+          # Mithril Client
+          - deny-args: ""
+            manifest-path: mithril-client/Cargo.toml
+          - deny-args: "--all-features"
+            manifest-path: mithril-client/Cargo.toml
+          - deny-args: "--no-default-features"
+            manifest-path: mithril-client/Cargo.toml
+
+          # Mithril Client WASM
+          - deny-args: ""
+            manifest-path: mithril-client-wasm/Cargo.toml
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: EmbarkStudios/cargo-deny-action@v2
+        with:
+          command: check licenses
+          arguments: ${{ matrix.deny-args }}
+          log-level: error
+          manifest-path: ${{ matrix.manifest-path }}
+
   e2e:
     runs-on: ubuntu-24.04
     needs: [build-ubuntu]
@@ -471,6 +515,7 @@ jobs:
     needs:
       - build
       - check
+      - licenses
       - test
       - e2e
     strategy:
@@ -573,6 +618,7 @@ jobs:
       - test
       - e2e
       - check
+      - licenses
     steps:
       - name: Checkout sources
         uses: actions/checkout@v5
@@ -632,6 +678,7 @@ jobs:
       - test
       - e2e
       - check
+      - licenses
     steps:
       - name: Checkout sources
         uses: actions/checkout@v5

deny.toml

@@ -0,0 +1,33 @@
+# Cargo-deny configuration file
+
+[graph]
+targets = [
+    "aarch64-apple-darwin",
+    "aarch64-unknown-linux-gnu",
+    "x86_64-pc-windows-msvc",
+    "x86_64-unknown-linux-gnu",
+    "x86_64-unknown-linux-musl",
+    "wasm32-unknown-unknown"
+]
+
+[licenses]
+# We want really high confidence when inferring licenses from text
+confidence-threshold = 0.93
+# This list of allowed licenses is not final and is currently under legal investigation. It may be updated in the future.
+allow = [
+    "Apache-2.0",
+    "BlueOak-1.0.0",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "bzip2-1.0.6",
+    "CC0-1.0",
+    "CDLA-Permissive-2.0",
+    "ISC",
+    "LGPL-3.0-or-later",
+    "MIT",
+    "MIT-0",
+    "MPL-2.0",
+    "Unicode-3.0",
+    "Zlib",
+]
+