fix(sbom-tools): allow BlueOak license (#614)

Confirmed by legal on Slack that this is acceptable.

Author: addaleax

packages/sbom-tools/README.md

@@ -129,6 +129,7 @@ The following licenses are allowed:
 - `WTFPL`
 - `OFL-1.1`
 - `Unlicense`
+- `BlueOak-1.0.0`
 
 The validation can be tweaked with a configuration file (by default `${cwd}/licenses.json`). The configuration allows ignoring certain orgs and packages, and overriding licenses for specific dependencies.
 

packages/sbom-tools/src/commands/generate-third-party-notices.ts

@@ -28,6 +28,7 @@ const ALLOWED_LICENSES = [
   'WTFPL',
   'OFL-1.1',
   'Unlicense',
+  'BlueOak-1.0.0',
 ];
 
 function checkOverrides(packagesToCheck: string[], dependencies: Package[]) {