Audit release licenses and provenance (#104)

tools/codegen/src/lib.rs

@@ -2109,7 +2109,9 @@ fn validate_inventory(inventory: &Inventory) -> Result<(), String> {
         validate_relative(&input.reference_path)?;
         validate_relative(&input.vendored_path)?;
         validate_hash(&input.sha256)?;
-        if input.license != "BSD-3-Clause" || !input_ids.insert(&input.id) {
+        if !matches!(input.license.as_str(), "BSD-3-Clause" | "CC-BY-SA-3.0")
+            || !input_ids.insert(&input.id)
+        {
             return Err(format!("invalid or duplicate input {}", input.id));
         }
     }