GitHub adds license checks that can block enterprise merges
GitHub made its open-source license checks generally available on October 16. Enterprise Cloud customers with Code Security can set one policy for dependency licenses. When a ruleset is active, GitHub can block a pull request that adds a dependency outside that policy. A new API lets coding agents check a package before they add it.
Verified 12:16 AM PDT · 1 original sources
GitHub says the checks compare each dependency with a company's policy. They do not give a legal opinion on every use of a package, and the configuration affects the result. Evaluate mode flags findings without blocking a merge, though a separate comment-resolution rule can still block it.
Teams can review policy audit events and package exceptions. The test is whether GitHub catches a new dependency before it reaches the codebase.
Audit the story
Original sources
Company claims remain company claims. Follow the reporting and judge the evidence directly.
- GitHub ChangelogOpen source license compliance generally available ↗
Continue the edition