Skip to main content

Set license policy

Set a license policy when you want to pass or fail a pipeline based on your organization's open source software license compliance policy.

Set the organization default​

  1. Open Settings → License Compliance.
  2. Select Yes to "Should we enforce this License Policy."
  3. Select Allow if you want to allow pipelines to pass when new licenses are seen that have not been put explicitly allowed or denied. Select Deny otherwise.
  4. Select licenses and place them in the allow or deny groups.
  5. Click Save Selection to begin enforcing the policy.

These settings apply to every project in your organization. For projects that need to override specific licenses, see the following section.

Use a different policy per project​

Organization admins can customize the policy for a project:

  1. Open the project and select Settings → License Compliance.
  2. Turn off Use organization license compliance settings.
  3. Configure whether the project checks code licenses, how unset licenses are treated, and any project-specific allowed or denied licenses.
  4. Save the changes.

A project override is layered over the organization policy. Values you do not change continue to inherit from the organization; project-specific choices take precedence. Turn Use organization license compliance settings back on to ignore the override and follow the current organization policy. The project-specific choices are kept if you later reactivate the override.

Users who are not organization admins can view the effective policy but cannot change it.

Review the findings this policy produces​

After you save a policy, open Review license findings to see which components conflict with it.