Expand license allowlist to handle compound SPDX expressions

Add deny-licenses for AGPL, SSPL, BUSL, Elastic.

Co-Authored-By: Itamar Hartstein <haritamar@gmail.com>

Author: devin-ai-integration[bot]

.github/workflows/dependency-review.yml

@@ -30,10 +30,20 @@ jobs:
           base-ref: ${{ inputs.base-ref || '' }}
           head-ref: ${{ inputs.head-ref || '' }}
           allow-licenses: >-
-            MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC,
-            PSF-2.0, Python-2.0, 0BSD, BlueOak-1.0.0,
+            MIT, MIT-0, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC,
+            PSF-2.0, Python-2.0, CNRI-Python, 0BSD, BlueOak-1.0.0,
             CC0-1.0, CC-BY-3.0, CC-BY-4.0, Unlicense,
-            MPL-2.0,
+            MPL-2.0, NCSA, ZPL-2.1, HPND-Markus-Kuhn,
             LGPL-2.1-only, LGPL-2.1-or-later,
-            LGPL-3.0-only, LGPL-3.0-or-later,
-            Artistic-2.0
+            LGPL-3.0-only, LGPL-3.0-or-later, LGPL-3.0,
+            GPL-1.0-only, GPL-1.0-or-later,
+            GPL-2.0-only, GPL-2.0-or-later,
+            GPL-3.0-only, GPL-3.0-or-later,
+            Artistic-2.0, Artistic-1.0-Perl,
+            LicenseRef-scancode-public-domain,
+            LicenseRef-scancode-public-domain-disclaimer,
+            LicenseRef-scancode-protobuf
+          deny-licenses: >-
+            AGPL-3.0-only, AGPL-3.0-or-later,
+            SSPL-1.0, BUSL-1.1,
+            Elastic-2.0