Implement a check which verifies that PRs have the valid SPDX headers: ``` # SPDX-FileCopyrightText: the secureCodeBox authors # # SPDX-License-Identifier: Apache-2.0 ```