chore(ci): include allowed licenses file in dependency review workflow

.github/dependency-review-config.yml

@@ -0,0 +1,35 @@
+allow-licenses:
+  - 'Apache-1.1'
+  - 'Apache-2.0'
+  - 'MIT'
+  - 'MIT-0'
+  - 'MIT-CMU'
+  - 'MIT-enna'
+  - 'MIT-feh'
+  - 'MIT-Festival'
+  - 'MIT-Modern-Variant'
+  - 'MIT-open-group'
+  - 'MIT-testregex'
+  - 'MIT-Wu'
+  - 'BSD-1-Clause'
+  - 'BSD-2-Clause'
+  - 'BSD-2-Clause-Views'
+  - 'BSD-3-Clause'
+  - 'BSD-3-Clause-Attribution'
+  - 'BSD-3-Clause-Clear'
+  - 'BSD-3-Clause-flex'
+  - 'BSD-3-Clause-HP'
+  - 'BSD-3-Clause-LBNL'
+  - 'BSD-3-Clause-Modification'
+  - 'BSD-3-Clause-No-Military-License'
+  - 'BSD-3-Clause-No-Nuclear-License'
+  - 'BSD-3-Clause-No-Nuclear-License-2014'
+  - 'BSD-3-Clause-No-Nuclear-Warranty'
+  - 'BSD-3-Clause-Open-MPI'
+  - 'Python-2.0'
+  - 'Python-2.0.1'
+  - 'ISC'
+  - 'MPL-1.1'
+  - 'MPL-2.0'
+comment-summary-in-pr: on-failure
+fail-on-scopes: runtime

.github/workflows/dependency-review.yml

@@ -15,8 +15,13 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - name: 'Checkout Repository'
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@38ecb5b593bf0eb19e335c03f97670f792489a8b # v4.7.0
+        with:
+          config-file: './.github/dependency-review-config.yml'

.github/workflows/quality_check.yml

@@ -61,8 +61,6 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
         run: make dev-quality-code
-      - name: Checking third-party library licenses
-        run: make check-licenses
       - name: Checking and enforcing format
         run: make format-check
       - name: Formatting and Linting