From b617e84dc024aca79baa5235c723fdb0245bd591 Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Sun, 13 Sep 2026 11:10:12 -0600
Subject: [PATCH 1/7] ci: 3rd-party licenses

ENG-9724
---
 .trivy.yaml | 11 +++++++++++
 CODEOWNERS  |  3 +++
 2 files changed, 14 insertions(+)

diff --git a/.trivy.yaml b/.trivy.yaml
index c509490..0b9304b 100644
--- a/.trivy.yaml
+++ b/.trivy.yaml
@@ -52,3 +52,14 @@ rego:
 
 pkg:
   include-dev-deps: true # supported: npm, yarn, gradle
+
+pkg:
+  include-dev-deps: true # supported: npm, yarn, gradle
+
+# https://trivy.dev/latest/docs/references/configuration/config-file/#license-options
+license:
+  confidenceLevel: 0.9 # '--license-confidence-level'
+  full: true # '--license-full'
+  # forbidden: []
+  # permissive: []
+  ignored: [] # '--ignored-licenses'
diff --git a/CODEOWNERS b/CODEOWNERS
index 2282b82..8b80ac2 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -18,3 +18,6 @@
 .trivyignore.yaml       @indykite/devx @indykite/ops
 .yamlfmt.yml            @indykite/devx @indykite/ops
 .yamllint.yml           @indykite/devx @indykite/ops
+
+# 3rd-party dependency license report, generated by 'ops-common//trivy-license'
+LICENSES.* @indykite/devx @indykite/ops

From 2fc438aeacc02247084b83604e03688e249270f2 Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Sun, 13 Sep 2026 12:53:20 -0600
Subject: [PATCH 2/7] ci: 3rd-party licenses

ENG-9724
---
 .pre-commit-config.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 008f0e4..cf7c21d 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -56,6 +56,7 @@ repos:
 
       # SAST
       - id: trivy
+      - id: trivy-licenses
         name: trivy
         entry: trivy filesystem --disable-telemetry --skip-version-check --exit-code=1 --config .trivy.yaml .
         language: system

From d7890ae12ce2a3053db3586044bdce5e6269607c Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Sun, 13 Sep 2026 19:27:51 -0600
Subject: [PATCH 3/7] ci: retrigger pre-commit workflow

ENG-9724

From 49918c2285aab0933665a8611a2cb0cf2f903fb4 Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Sun, 13 Sep 2026 19:30:52 -0600
Subject: [PATCH 4/7] ci: retrigger pre-commit checks

ENG-9724

From 89d3f4b27eeb6448dfce7f4cb104a91a8ebd919d Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Sun, 13 Sep 2026 19:32:23 -0600
Subject: [PATCH 5/7] fix(ci): remove duplicate trivy-licenses hook id

ENG-9724
---
 .pre-commit-config.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index cf7c21d..008f0e4 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -56,7 +56,6 @@ repos:
 
       # SAST
       - id: trivy
-      - id: trivy-licenses
         name: trivy
         entry: trivy filesystem --disable-telemetry --skip-version-check --exit-code=1 --config .trivy.yaml .
         language: system

From 508e3d50f60c4adca323734aa26d4cfd11255c28 Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Sun, 13 Sep 2026 19:37:08 -0600
Subject: [PATCH 6/7] ci: retrigger pre-commit workflow

ENG-9724

From 273c2c01fbc5a3bfea45437c8e283048b5483fbb Mon Sep 17 00:00:00 2001
From: Alex P <130386437+alexpriv8@users.noreply.github.com>
Date: Sun, 13 Sep 2026 19:39:37 -0600
Subject: [PATCH 7/7] fix(ci): remove duplicate pkg key in .trivy.yaml

ENG-9724
---
 .trivy.yaml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.trivy.yaml b/.trivy.yaml
index 0b9304b..f4adefd 100644
--- a/.trivy.yaml
+++ b/.trivy.yaml
@@ -53,9 +53,6 @@ rego:
 pkg:
   include-dev-deps: true # supported: npm, yarn, gradle
 
-pkg:
-  include-dev-deps: true # supported: npm, yarn, gradle
-
 # https://trivy.dev/latest/docs/references/configuration/config-file/#license-options
 license:
   confidenceLevel: 0.9 # '--license-confidence-level'