ROX-31937: Generate third-party deps license files.

[ovalenti]

Description

• Provide an way to easily generate the third-party copyright+license bundle.
• Add a CI check that the list of licenses used by dependencies is within the accepted list.

Checklist

• Investigated and inspected CI test results
• Updated documentation accordingly

Automated testing

• Added unit tests
• Added integration tests
• Added regression tests

[ovalenti]

@Molter73 I think that the current state of this PR reflects what we discussed. Could you take a look ?

[Molter73]

Mostly LGTM! Just a few comments.

[Molter73]

Since we went back to using PRs for konflux/mintmaker updates, we can remove this one.

Suggested change

- konflux/**

[Molter73]

Should we also make the check required? There is a mintmaker job for updating dependencies and I think this should be checked by it as well.

If so, you should look into adding the steps to https://github.com/stackrox/automation-iac/blob/main/resources/source-mgmt/repositories/fact.tf once this is merged to master.

[ovalenti]

I am not sure that we should make it 'required' before we have seen it run for a little bit.

Also, setting the flag on the job can be done only by admins.

[Molter73]

I am not sure that we should make it 'required' before we have seen it run for a little bit.

Fair.

Also, setting the flag on the job can be done only by admins.

You can open a PR to the repo I linked above and the automation team will take care of doing that for you, no need to be admin.