Problem

Sometimes spotless doesn't run on a PR before it's merged to main despite it being configured to run automatically as part of a git hook. This can cause other's PRs that merge from main afterwards to automatically run spotless against files they didn't change.

Solution

Add a check in security CI that runs spotlessCheck and fails the check if any files need to be changed by Spotless

Alternatives

No response