Add security requirements

Author: NikosVlagoidis

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Reviews are required by
+#
+# - @pennylane-hq/fellowship_dependencies_backend
+
+* @pennylane-hq/fellowship_dependencies_backend

.github/RECOMMENDED_CODEOWNERS

@@ -0,0 +1,5 @@
+# It is recommended to receive reviews from
+#
+# - @pennylane-hq/security as this gem handles the authentication/authorization of users
+
+* @pennylane-hq/security

.github/workflows/test.yml

@@ -104,3 +104,16 @@ jobs:
 
       - name: Run linter
         run: bundle exec rubocop
+
+  license_checks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+      - name: Install gems
+        run: bundle install
+      - name: Check licenses
+        run: bundle exec license_finder

.pre-commit/check_ssh_keys_passphrase.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+exitcode=0
+SSH_KEYS_DIR="$HOME"/.ssh/
+
+while IFS= read -r keyfile
+do
+    (grep -l "OPENSSH PRIVATE" "$keyfile" 2>/dev/null | grep -v personal 1>/dev/null 2>&1) || continue
+    if ssh-keygen -y -P "" -f "$keyfile" 1>/dev/null 2>&1 ; then
+        echo SSH key with no passphrase: "$keyfile"
+        exitcode=1
+    fi
+done < <(find "$SSH_KEYS_DIR" -maxdepth 1 -type f 2> /dev/null)
+
+if [ $exitcode == 1 ]; then
+    cat << EOF
+
+At least one of your SSH keys doesn't have a passphrase. For security reasons,
+a passphrase is needed on all non-personal SSH keys. Please refer to the 'Signed commits'
+section of the 'Repositories hardening' page on Notion for more information:
+https://www.notion.so/scribetech/Repositories-hardening-1cfc3cfcebe842bc88c3ac4fae4a0506
+EOF
+fi
+
+exit $exitcode

cancancan.gemspec

@@ -26,4 +26,5 @@ Gem::Specification.new do |s|
   s.add_development_dependency 'rake', '~> 10.1', '>= 10.1.1'
   s.add_development_dependency 'rspec', '~> 3.2', '>= 3.2.0'
   s.add_development_dependency 'rubocop', '~> 1.31.1'
+  s.add_development_dependency 'license_finder', '~> 7.2'
 end

doc/dependency_decisions.yml

@@ -0,0 +1,17 @@
+---
+- - :permit
+  - MIT
+  - :who:
+    :why:
+    :versions: []
+    :when: 2026-05-12 09:52:05.023258000 Z
+- - :permit
+  - ruby
+  - &1
+    :who:
+    :why:
+    :versions: []
+    :when: 2026-05-12 09:52:28.040835000 Z
+- - :permit
+  - Simplified BSD
+  - *1