Note that this is about source code, not binaries, or nobody would be working with docker (and more.)

Of course a company must forbid copy/paste of GPL code, because that would GPL the codebase and that's hardly what they want. But one should ask the Legal office (and/or other offices) about adding any MIT, BSD or proprietary library: credit must be given (how?), licenses must be available and compatible with the way the software is distributed. There are so many licenses out there, everything should be vetted.

Re: code vs. binaries, it depends on the license. Another commenter has been pointing out that Google forbids any use of AGPL projects, period [1] because its definition of "linking" includes communication over a network.

Of course everything should be vetted, but lawyers have canned advice about common licenses they see often — GPL, MIT, etc.

[1] https://opensource.google/documentation/reference/using/agpl...