chore(ci): split deny check into optional (all) and required (licenses) (vectordotdev#24990)

ci(deny): split deny check into optional (all) and required (licenses)

Co-authored-by: Pavlos Rontidis <pavlos.rontidis@gmail.com>

Author: thomasqueirozb

.github/workflows/deny.yml

@@ -26,12 +26,14 @@ on:
         type: string
 
   pull_request:
+  merge_group:
+    types: [checks_requested]
   schedule:
     # Same schedule as nightly.yml
     - cron: "0 5 * * 2-6"  # Runs at 5:00 AM UTC, Tuesday through Saturday
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.event.number || github.sha }}
   cancel-in-progress: true
 
 permissions:
@@ -48,8 +50,6 @@ jobs:
     timeout-minutes: 30
     if: ${{ always() && (github.event_name != 'pull_request' || needs.changes.outputs.deny == 'true') }}
     needs: [changes]
-    env:
-      CARGO_INCREMENTAL: 0
     steps:
       - name: Checkout branch
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -61,5 +61,24 @@ jobs:
           mold: false
           cargo-deny: true
 
-      - name: Check cargo deny advisories/licenses
+      - name: Check cargo deny (all)
         run: make check-deny
+
+  test-deny-licenses:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    if: ${{ always() && (github.event_name != 'pull_request' || needs.changes.outputs.deny == 'true') }}
+    needs: [changes]
+    steps:
+      - name: Checkout branch
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: ${{ inputs.ref }}
+
+      - uses: ./.github/actions/setup
+        with:
+          mold: false
+          cargo-deny: true
+
+      - name: Check cargo deny licenses
+        run: make check-deny-licenses

Makefile

@@ -518,6 +518,10 @@ check-scripts: ## Check that scripts do not have common mistakes
 check-deny: ## Check advisories licenses and sources for crate dependencies
 	${MAYBE_ENVIRONMENT_EXEC} $(VDEV) check deny
 
+.PHONY: check-deny-licenses
+check-deny-licenses: ## Check licenses for crate dependencies
+	${MAYBE_ENVIRONMENT_EXEC} $(VDEV) check deny --licenses-only
+
 .PHONY: check-events
 check-events: ## Check that events satisfy patterns set in https://github.com/vectordotdev/vector/blob/master/rfcs/2020-03-17-2064-event-driven-observability.md
 	${MAYBE_ENVIRONMENT_EXEC} $(VDEV) check events

vdev/src/commands/check/deny.rs

@@ -5,10 +5,19 @@ use crate::app;
 /// Check for advisories, licenses, and sources for crate dependencies
 #[derive(clap::Args, Debug)]
 #[command()]
-pub struct Cli {}
+pub struct Cli {
+    /// Only check licenses
+    #[arg(long)]
+    licenses_only: bool,
+}
 
 impl Cli {
     pub fn exec(self) -> Result<()> {
+        let check = if self.licenses_only {
+            "licenses"
+        } else {
+            "all"
+        };
         app::exec(
             "cargo",
             [
@@ -17,7 +26,7 @@ impl Cli {
                 "error",
                 "--all-features",
                 "check",
-                "all",
+                check,
             ],
             true,
         )