Re: [DISCUSS] CI check for disallowed (Category X) dependency licenses via SBOM for pull requests

[Adam Monsen]

+1

I suggest the logic is moved into a shell script alongside the others in
scripts/. Call the script from a simple workflow configuration (a
la .github/workflows/verify-commits.yml). That makes it easier to
confirm/repo/run locally.