diff --git a/.github/dependency-review.yml b/.github/dependency-review.yml
new file mode 100644
index 0000000..527cb3e
--- /dev/null
+++ b/.github/dependency-review.yml
@@ -0,0 +1,8 @@
+fail_on_severity: low
+allow_licenses:
+  - 'GPL 3.0'
+  - 'BSD 3 Clause'
+  - 'MIT'
+#deny_licenses:
+#  - "LGPL 2.0"
+#  - "BSD 2 Clause"