bypass dependency scanning bug

microsoft · Apr 25, 2024 · 112ac8a · 112ac8a
1 parent 5b75a02
commit 112ac8a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/github-dependency-review.yaml b/.github/workflows/github-dependency-review.yaml
@@ -20,7 +20,8 @@ jobs:
         uses: actions/dependency-review-action@v4
         with:
           # AND combinations are currently bugged and must be listed separately: https://github.com/actions/dependency-review-action/issues/263
-          allow-licenses: MIT, Apache-2.0, BSD-3-Clause, ISC, Unicode-DFS-2016, (MIT OR Apache-2.0) AND Unicode-DFS-2016
+          # OR combinations are currently bugged and must be listed separately: https://github.com/actions/dependency-review-action/issues/670
+          allow-licenses: MIT, Apache-2.0, BSD-3-Clause, ISC, Unicode-DFS-2016, (MIT OR Apache-2.0) AND Unicode-DFS-2016, Unlicense OR MIT
           # anstyle is licensed as (MIT OR Apache-2.0), but the Github api fails to detect it: https://github.com/rust-cli/anstyle/tree/main/crates/anstyle
           allow-dependencies-licenses: 'pkg:cargo/[email protected]'
           comment-summary-in-pr: on-failure