From 079573c1e6e0e7e69219ca87405d9267794803e2 Mon Sep 17 00:00:00 2001
From: Alois Zoitl <alois.zoitl@gmx.at>
Date: Wed, 14 Oct 2026 21:43:04 +0200
Subject: [PATCH] Employ Eclipse Dash to control 3rd party dependencies

Add GitHub CI action to check 3rd party with Eclipse Dash.
"Automate IP team review requests" functionality requires API token to
be asked via EF HelpDesk ticket by PL
---
 .github/workflows/licensecheck.yml | 37 ++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 .github/workflows/licensecheck.yml

diff --git a/.github/workflows/licensecheck.yml b/.github/workflows/licensecheck.yml
new file mode 100644
index 0000000000..8badbdf3e3
--- /dev/null
+++ b/.github/workflows/licensecheck.yml
@@ -0,0 +1,37 @@
+###############################################################################
+# Copyright (c) 2023, 2026 Contributors to Eclipse Foundation
+#
+# This program and the accompanying materials are made available under the
+# terms of the Eclipse Public License 2.0 which is available at
+# https://www.eclipse.org/legal/epl-2.0/.
+#
+# SPDX-License-Identifier: EPL-2.0
+#
+# Contributors:
+#     see git history
+###############################################################################
+# This workflow will check for Maven projects if the licenses of all (transitive) dependencies are vetted.
+
+name: License vetting status check
+
+on:
+  push:
+    branches: 
+      - 'main'
+  pull_request:
+    branches: 
+      - 'main'
+  issue_comment:
+    types: [created]
+
+permissions:
+  pull-requests: write
+
+jobs:
+  call-license-check:
+    uses: eclipse-dash/dash-licenses/.github/workflows/mavenLicenseCheck.yml@c1e285d67462be242b1b1ecfb1ad51e70271d5d9 #master
+    with:
+      projectId: iot.milo
+      javaVersion: 17
+    secrets:
+      gitlabAPIToken: ${{ secrets.GITLAB_API_TOKEN }}