Cherry-pick commit #907 to release-1.17

.github/workflows/ci.yaml

@@ -66,10 +66,17 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting.
         run: ./bin/licensei list
 
+      - name: Vendor dependencies to retrieve licenses locally
+        # Vendor deps before running https://github.com/goph/licensei
+        # to avoid false-positive when modules github repo could not be determined
+        run: go mod vendor -o vendor
+
       - name: Check dependency licenses
         env:
           GITHUB_TOKEN: ${{ github.token }} # Note: this is required for licensei auth in steps to avoid rate-limiting.
-        run: make license-check
+        run: |
+          make license-check
+          make vendor-clean
 
       - name: Run unit tests, linter, etc.
         run: make check

.licensei.toml

@@ -29,7 +29,8 @@ ignored = [
 
 [header]
 ignorePaths = [
-    "build"
+    "build",
+    "vendor"
 ]
 
 ignoreFiles = [

Makefile

@@ -62,6 +62,10 @@ license-check: bin/licensei ## Run license check
 license-cache: bin/licensei ## Generate license cache
 	bin/licensei cache
 
+.PHONY: vendor-clean
+vendor-clean: ## Clean vendor cache
+	rm -rf ${PWD}/vendor
+
 # Run tests
 .PHONY: test
 test: install-envtest