Add licchecker for license checking

.github/workflows/ci.yml

@@ -48,6 +48,21 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Install poetry
+        run: pipx install poetry
+
+      - name: Set up Python ${{ env.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+          cache: "poetry"
+
+      - name: Install dependencies
+        run: poetry install
+
+      - name: check licenses used by project in pyproject.toml
+        run: liccheck -s pyproject.toml
+
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:

pyproject.toml

@@ -31,6 +31,7 @@ pydantic-settings = "^2.2.1"
 psycopg2-binary = "^2.9.9"
 uvicorn = {extras = ["standard"], version = "^0.29.0"}
 
+
 [tool.poetry.group.test.dependencies]
 pytest = "^8.1.1"
 coverage = "^7.5.1"
@@ -40,6 +41,7 @@ httpx = "^0.27.0"
 ruff = "^0.4.3"
 pre-commit = "^3.7.0"
 pyright = "^1.1.361"
+liccheck = "^0.9.2"
 
 [tool.poetry.urls]
 "Issue Tracker" = "https://github.com/MinBZK/tad/issues"
@@ -103,3 +105,14 @@ addopts = "--strict-markers"
 filterwarnings = [
     "ignore::UserWarning"
 ]
+
+[tool.liccheck]
+level = "PARANOID"
+dependencies = true
+authorized_licenses = [
+    "BSD",
+    "Python Software Foundation",
+    "MIT",
+    "Apache Software",
+    "GNU Library or Lesser General Public License (LGPL)"
+]