How to block vulnerable and non-compliant artifacts at admission

Teams often treat “uploaded” as “scanned.” What you actually need to stop is risky versions still being pulled / installed / restored downstream, and whether license policy is enforced. A CI report al