fix: except license for coverage action

Author: smlx

.github/dependency-review-config.yaml

@@ -1,5 +1,5 @@
 # https://github.com/cncf/foundation/blob/main/allowed-third-party-license-policy.md
-allow_licenses:
+allow-licenses:
 - 'Apache-2.0'
 - 'BSD-2-Clause'
 - 'BSD-2-Clause-FreeBSD'
@@ -10,3 +10,8 @@ allow_licenses:
 - 'Python-2.0'
 - 'X11'
 - 'Zlib'
+
+# this action is GPL-3 but it is only used in CI
+# https://github.com/actions/dependency-review-action/issues/530#issuecomment-1638291806
+allow-dependencies-licenses: >
+  pkg:githubactions/vladopajic/go-test-coverage@bcd064e5ceef1ccec5441519eb054263b6a44787

.github/workflows/coverage.yaml

@@ -20,7 +20,7 @@ jobs:
         # remove mocks from coverage calculation
         grep -v mock_ cover.out.raw > cover.out
     - name: Generage coverage badge
-      uses: vladopajic/go-test-coverage@v2
+      uses: vladopajic/go-test-coverage@bcd064e5ceef1ccec5441519eb054263b6a44787 # v2.8.2
       with:
         profile: cover.out
         local-prefix: github.com/smlx/go-cli-github