diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 706741a7..e8710421 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -174,6 +174,18 @@ jobs:
       - name: Build and test JS frontend
         run: make console/data/frontend test-js
 
+  licenses:
+    name: ⚖️ Check licenses
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup
+        uses: ./.github/actions/setup
+      - name: License check
+        run: make licensecheck
+
   docker:
     name: 🐋 Build Docker images
     needs:
diff --git a/.wwhrd.yml b/.wwhrd.yml
index c32d2262..cf16f60b 100644
--- a/.wwhrd.yml
+++ b/.wwhrd.yml
@@ -1,4 +1,5 @@
 ---
+# List of licenses compatible with AGPL-3.0-only
 allowlist:
   - Apache-2.0
   - BSD-3-Clause
@@ -7,3 +8,5 @@ allowlist:
   - MPL-2.0
   - MIT
   - ISC
+  - WTFPL
+  - 0BSD
diff --git a/Makefile b/Makefile
index 1c61be7e..fe2d540e 100644
--- a/Makefile
+++ b/Makefile
@@ -190,7 +190,7 @@ licensecheck: console/frontend/node_modules | $(WWHRD) ; $(info $(M) check depen
 	$Q err=0 ; go mod vendor && $(WWHRD) --quiet check || err=$$? ; rm -rf vendor/ ; exit $$err
 	$Q cd console/frontend ; npm exec --no -- license-compliance \
 		--production \
-		--allow "MIT;ISC;Apache-2.0;BSD-3-Clause;WTFPL;0BSD" \
+		--allow "$$(sed -n 's/^  - //p' ../../.wwhrd.yml | paste -sd ";")" \
 		--report detailed
 
 .PHONY: clean mrproper