GitHub connected license policy to merge rules, roles, audit logs and APIs.
GitHub makes license compliance merge controls generally available
2026-10-16Verified announcementTRIAL
GitHub made license compliance generally available to Enterprise Cloud customers with GitHub Code Security. Teams can block merges through rulesets based on allowed or denied licenses and manage policy through an enterprise License Manager role, audit logs and APIs. The official page exposes a date but no verifiable publication time.
What this means for you
For enterprise teams managing dependencies and AI-generated code, license checking becomes an enforceable merge policy rather than a report. It is plan-gated, and false positives and exception workflows still need repository-level testing.
Evidence & related material
Technical details & scores
| Stage | GA |
|---|---|
| Eligibility | GitHub Enterprise Cloud with GitHub Code Security |
| Controls | ruleset condition can block merges by license policy |
| Administration | Enterprise OS License Manager role, audit events and APIs |
| Time Basis | official page has date only; first observed just after the previous run start, so strict hour placement is unavailable |
Technical impact 2
Engineering value 4
Adoption signal 3
Maturity 4
Verification cost 2
Risk 2