License Compliance scanning
As part of your CI (#12 (closed)) you can also enable license compliance scanning to… cough maybe/potentially prevent such things as they happened before (see #2 (closed) etc.)
Again (ref #28 #27) GitLab Auto DevOps can help.
This partly depends on #12 (closed) of course.