From b69284f1c43b2d89927f600f6e7e499ea547953f Mon Sep 17 00:00:00 2001
From: ilia <idobkin@gmail.com>
Date: Thu, 1 Jan 2026 12:59:18 -0500
Subject: [PATCH] CI: enforce license check and ignore private root package

---
 .gitea/workflows/ci.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index cff8faf..eb323a7 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -236,11 +236,12 @@ jobs:
       - name: Check npm licenses
         run: |
           if [ -f "package.json" ]; then
-            license-checker --onlyAllow 'MIT;Apache-2.0;BSD-3-Clause;ISC;BSD-2-Clause' || true
+            npm ci
+            # Exclude the repo itself (private=true packages are treated as UNLICENSED by license-checker).
+            license-checker --excludePrivatePackages --onlyAllow 'MIT;Apache-2.0;BSD-3-Clause;ISC;BSD-2-Clause'
           else
             echo "No package.json found, skipping license check"
           fi
-        continue-on-error: true
 
   vault-check:
     needs: skip-ci-check