The same GPL component can be compatible for internal use and incompatible when you distribute a binary or an image. In AngusSecurity, set the license policy to the way you actually ship, so an incompatible license blocks the merge instead of only being written down.