I am trying to use actions/dependency-review-action to only allow certain licensed dependencies to be merged in my project. One of my package turns out to be dual licensed. This is the snippet for the github actions workflow.
<code>- name: Dependency Review
uses: actions/[email protected]
with:
fail-on-severity: high
# Use comma-separated names to pass list arguments:
allow-licenses: MIT, 0BSD, MIT AND Apache-2.0
</code>
<code>- name: Dependency Review
uses: actions/[email protected]
with:
fail-on-severity: high
# Use comma-separated names to pass list arguments:
allow-licenses: MIT, 0BSD, MIT AND Apache-2.0
</code>
- name: Dependency Review
uses: actions/[email protected]
with:
fail-on-severity: high
# Use comma-separated names to pass list arguments:
allow-licenses: MIT, 0BSD, MIT AND Apache-2.0
But none of the licences are getting known
ISSUE
If i remove the MIT AND Apache-2.0 from the list and i add Apache-2.0 like this: MIT, 0BSD, Apache-2.0
This is what happens
Issue
New contributor
Milan Pokhrel is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.