ENGINEERING

Copyleft Detection Incident Auto-Block

When a PR introduces a strong-copyleft license (GPL/AGPL), this immediately fails the check, requests changes on the PR.

CategoryEngineering
Enginesim
Difficultyintermediate
Triggerevent
Steps6
Setup~15 min

How it runs

The automated pipeline, trigger to output.

  • TriggerPR opened or synchronizedGitHubGitHub
  • ActionResolve added dependency licensesGitHubGitHub
  • LogicDetect strong-copyleft (GPL/AGPL) licenses
  • ActionSubmit Request Changes reviewGitHubGitHub
  • ActionOpen assigned Linear remediation issueLinearLinear
  • OutputLink Linear issue back into the PRGitHubGitHub

What it does

Treats a strong-copyleft dependency as a blocking incident rather than a soft warning. The moment one is detected on a PR, it converts the check to a hard failure, formally requests changes, and creates a tracked remediation task so the violation cannot be merged or forgotten.

When to use it

Use it when AGPL or GPL contamination is a serious legal risk for your codebase and you want a zero-tolerance, fully tracked response the instant such a dependency appears in review.

How it works

  1. 1A GitHub PR review event fires on open or synchronize.
  2. 2An action resolves the licenses of the PR's added dependencies.
  3. 3A logic step checks specifically for strong-copyleft SPDX identifiers; non-matches exit quietly.
  4. 4On a match, an action submits a GitHub Request Changes review naming the offending package.
  5. 5An action opens a Linear issue assigned to the PR author with the package, its license, and suggested permissive alternatives.
  6. 6The output step links the Linear issue back into the PR conversation.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect GitHubRepos, issues, pull requests, actions.
  2. 2
    Connect LinearIssues, projects, cycles, triage.
  3. 3
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  4. 4
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  5. 5
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.