fossabot for AI Guardrails

fossabot is an AI Agent for code maintenance, including analysis of AI-generated code for problematic license issues. LLMs are trained on open source code that may introduce licensing ramifications for your organization if merged.

AI/Snippet Review in Pull Requests

fossabot can run an AI Guardrails review against the changed files within a Pull Request or Merge Request.

Problematic snippets of code are flagged by the file in which they appear and the license that FOSSA has attributed to that code. Files are only flagged when the license matches your deny list.

fossabot blocking GPL'd code included in a Pull Request

Block Issues with a Pre-Merge Check

A highly recommended to enforce the AI Guardrail review as a pre-merge check.

This configuration cuts down on noise when no findings are found, the PR simply gets a green check mark. It's optional whether you want the check to block merges or not, however.