Add Dependency Review GitHub Action#1031

Merged

haritamar merged 13 commits into

devin/1782396275-add-dependency-review

Jun 29, 2026

Commits on Jun 28, 2026

Add fail-on-severity: high to dependency review workflow

devin-ai-integration[bot]
and
haritamar
committed
Expand license allowlist to handle compound SPDX expressions

devin-ai-integration[bot]
and
haritamar
committed
Remove deny-licenses (cannot use both allow and deny)

devin-ai-integration[bot]
and
haritamar
committed
Block GPL, exempt specific packages with compound licenses

devin-ai-integration[bot]
and
haritamar
committed
Organize allow-licenses into commented sections

devin-ai-integration[bot]
and
haritamar
committed
Move license config to separate file with categorized comments

devin-ai-integration[bot]
and
haritamar
committed
Add license exceptions for new uv.lock dependencies

devin-ai-integration[bot]
and
haritamar
committed
Trim unused license exceptions (no Python deps in this dbt package)

devin-ai-integration[bot]
and
haritamar
committed