CI: add job for checking licenses from dependencies

The check is implemented using wwhrd [1] and the allowed
licenses are listed on the `.wwhrd.yml` file.

1. https://github.com/frapposelli/wwhrd

.github/workflows/ci-cd.yaml

@@ -88,6 +88,18 @@ jobs:
       - name: trento checks ID sanity test
         run: python3 hack/id_checker.py
 
+  check-licenses:
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-go@v2
+        with:
+          go-version: 1.16
+      - name: Install WWHRD
+        run: make install-wwhrd
+      - name: Run check
+        run: make check-licenses
+
   test-e2e:
     needs: build-static-binary
     runs-on: ubuntu-20.04

.gitignore

@@ -5,4 +5,5 @@
 /packaging/helm/trento-server/charts/*.tgz
 /hack/helm/trento-dev/charts/*.tgz
 /test/e2e/cypress/videos
-/test/e2e/cypress/screenshots/
+/test/e2e/cypress/screenshots/
+/vendor

.wwhrd.yml

@@ -0,0 +1,7 @@
+allowlist:
+  - Apache-2.0
+  - BSD-2-Clause
+  - BSD-3-Clause
+  - ISC
+  - MIT
+  - MPL-2.0

Makefile

@@ -148,3 +148,12 @@ web/frontend/assets/images:
 .PHONY: helm-lint
 helm-lint:
 	docker run --rm -ti --name trento-chart-test -w /workdir -v $(shell pwd):/workdir quay.io/helmpack/chart-testing:v3.4.0 ct lint
+
+.PHONY: install-wwhrd
+install-wwhrd:
+	which wwhrd || go install github.com/frapposelli/wwhrd@latest
+
+.PHONY: check-licenses
+check-licenses: install-wwhrd
+	go mod vendor
+	wwhrd check -q