teb4rts/License Compliance Enforcer
Free, advanced license compliance enforcement for every ecosystem. Blocks non-compliant deps before they hit production.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| policy | Policy preset (startup|enterprise|open-source|permissive-only) or path to policy.yml | no | startup |
| ecosystems | Comma-separated list of ecosystems to scan, or "auto" to detect | no | auto |
| fail-on-violation | Fail the workflow if violations are found | no | true |
| generate-sbom | Generate a Software Bill of Materials (SBOM) | no | true |
| sbom-format | SBOM format: cyclonedx | spdx | all | no | all |
| post-pr-comment | Post a compliance report as a PR comment | no | true |
| block-on-unknown | Block if license cannot be determined | no | true |
| scan-transitive | Scan transitive (indirect) dependencies | no | true |
| exceptions-file | Path to exceptions file (overrides inline exceptions in policy.yml) | no | "" |
| upload-sbom | Upload SBOM as a workflow artifact | no | true |
| report-format | Report format: text | markdown | json | sarif | no | markdown |
| working-directory | Directory to scan (default: repo root) | no | . |
Outputs
| name | description |
|---|---|
| violations-count | Number of license violations found |
| warnings-count | Number of warnings found |
| packages-scanned | Total number of packages scanned |
| compliant | true if no violations found, false otherwise |
| sbom-path | Path to the generated SBOM file(s) |
| report-path | Path to the compliance report |