DependencyTrack / DependencyTrack/dependency-track
License policies do not produce the expected result.
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
I have added two different license policies to the project, but only the license violations that meet the first policy are being reported.
This works OK (limited to one project)

license group

This reports all non permissive licenses.
This second policy does not produce any results. (global)

license group

GPL 3.0.. licenses are not reported as a fail.
### Steps to Reproduce
1. Existing project with components and license information
2. Create 2 new policies as above to track used licenses
3. Refresh / load SBOM
### Expected Behavior
Results are received from both policies.
All GPL3.0.. licenses should also result a fails.
### Dependency-Track Version
4.13.4
### Dependency-Track Distribution
Container Image
### Database Server
PostgreSQL
### Database Server Version
16-alpine
### Browser
Google Chrome
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported
Contributor guide
Assessment
This issue has not been assessed yet.