Okay so are they going to block foreign github repos? This seems totally unenforceable.

You underestimate the power EU believes it has

> believes

You just mandate the scanning into the OS, then mandate what OSes hardware is allowed to boot.