What is the areas you would like to add the new feature to?

Notation CLI

Is your feature request related to a problem?

This is a requirement about scanning and checking whether code changes contain correct license headers and their dependencies in each PRchecking

What solution do you propose?

We want to check license headers and dependencies' licenses for Notation. This is important to align with the CNCF open-source compliance policy.

SkyWalking-Eyes might be a good tool to implement the license header check and can be integrated into the GitHub Actions workflow.

It will scan and check whether code changes contain correct license headers and their dependencies in each PR (CI). There is an example in ORAS: https://github.com/oras-project/oras/actions/runs/4912774337/jobs/8772170747

What alternatives have you considered?

N/A

Any additional context?

Two things we need to complete for this issue:

• Generate a template to generate the summary of dependencies' licenses
• Add this license check to GitHub Actions