Check License Compliance

Spec sheet

Purpose

Checks repository dependencies against allowed, forbidden, and warning license policies.Read 4 Oct 2026 · github.com

Deployment

The GitHub Action runs using a Docker image defined by the repository's Dockerfile.Read 4 Oct 2026 · github.com

Maker

The action identifies its author as Telefónica Innovación Digital.Read 4 Oct 2026 · github.com

CI integration

The product is provided as a GitHub Action that can run in GitHub Actions workflows.Read 4 Oct 2026 · github.com

Configuration

Configuration can be supplied in a YAML file, through action inputs, or both, and supports selecting or excluding dependencies and files.Read 4 Oct 2026 · github.com

Dependency lookup

Reads manifest files and retrieves dependency tree information recursively from the deps.dev API, without requiring dependencies to be installed first.Read 4 Oct 2026 · github.com

License matching limit

License expressions using AND or OR are not supported; simple SPDX identifiers, plus-ranges, and exceptions are supported.Read 4 Oct 2026 · github.com

Open-source license

The project is licensed under Apache-2.0.Read 4 Oct 2026 · github.com

Organization location

The Telefónica GitHub organization profile lists Spain.Read 4 Oct 2026 · github.com

Policy controls

Policies can allow, forbid, or warn on licenses, with configurable behavior for other or unknown licenses.Read 4 Oct 2026 · github.com

Pull request comments

A composite action can post check results as a comment on a pull request.Read 4 Oct 2026 · github.com

Reports

Results can be reported as text, Markdown, or JSON, including details about noncompliant dependencies, their installation paths, and licenses.Read 4 Oct 2026 · github.com

Supported ecosystems

Checks dependencies for Node.js (NPM), Python (PyPI), Maven, and Go.Read 4 Oct 2026 · github.com

Plans and prices

Every Check License Compliance plan and price →

Where Specifiction places it

• Open Source License Compliance Software#9 of 288.0