This is an automated email from the ASF dual-hosted git repository.
XiaoHongbo-Hope pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/paimon-mosaic.git
The following commit(s) were added to refs/heads/main by this push:
new 652c397 ci: check Rust dependency licenses (#31)
652c397 is described below
commit 652c397c1c04270c4a8e07ffb02f4245452a2323
Author: QuakeWang <[email protected]>
AuthorDate: Fri May 22 12:17:25 2026 +0800
ci: check Rust dependency licenses (#31)
Signed-off-by: QuakeWang <[email protected]>
---
.github/workflows/ci.yml | 8 ++++++++
deny.toml | 32 ++++++++++++++++++++++++++++++++
2 files changed, 40 insertions(+)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 510519a..c75da17 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,6 +43,14 @@ jobs:
- name: Validate .asf.yaml
run: pip install pyyaml -q && python3 tools/validate_asf_yaml.py
+ - name: Install cargo-deny
+ uses: taiki-e/install-action@v2
+ with:
+ tool: [email protected]
+
+ - name: Check dependency licenses (Apache-compatible)
+ run: cargo deny check licenses
+
- name: Format
run: cargo fmt --all -- --check
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 0000000..0cc04f6
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,32 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+[licenses]
+allow = [
+ "Apache-2.0",
+ "Apache-2.0 WITH LLVM-exception",
+ "BSD-2-Clause",
+ "CC0-1.0",
+ "MIT",
+ "Unicode-3.0",
+]
+
+exceptions = [
+ # Used as a Rust build dependency to generate C headers for the FFI crate.
+ # MPL-2.0 is ASF Category B and this crate is not linked into artifacts.
+ { crate = "cbindgen", allow = ["MPL-2.0"] },
+]
