GitHub’s new tool helps prevent costly open-source license violations

GitHub's License Compliance feature (public preview) is used by the OSPO to scan new dependencies in pull requests, enforce organization-wide license policies, generate alerts for non-compliant licenses, and manage exception requests and approval workflows; the report describes policy creation, review processes, and operational controls (Evaluate vs Active modes, SLA for reviews, emergency overrides) rather than any security incident.