diff --git a/.trivy.yaml b/.trivy.yaml
index c509490..f4adefd 100644
--- a/.trivy.yaml
+++ b/.trivy.yaml
@@ -52,3 +52,11 @@ rego:
 
 pkg:
   include-dev-deps: true # supported: npm, yarn, gradle
+
+# https://trivy.dev/latest/docs/references/configuration/config-file/#license-options
+license:
+  confidenceLevel: 0.9 # '--license-confidence-level'
+  full: true # '--license-full'
+  # forbidden: []
+  # permissive: []
+  ignored: [] # '--ignored-licenses'
diff --git a/CODEOWNERS b/CODEOWNERS
index 2282b82..8b80ac2 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -18,3 +18,6 @@
 .trivyignore.yaml       @indykite/devx @indykite/ops
 .yamlfmt.yml            @indykite/devx @indykite/ops
 .yamllint.yml           @indykite/devx @indykite/ops
+
+# 3rd-party dependency license report, generated by 'ops-common//trivy-license'
+LICENSES.* @indykite/devx @indykite/ops