OpenSCA-cli
OpenSCA-cli copied to clipboard
XmirrorSecurity
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the...
由于采用Golang标准archive/zip库解压jar文件。有许多jar文件，虽然是zip文件，但是这些jar文件开头含有一些标识符，导致go认为这不是个标准的zip文件。实际python、unzip等工具都可以正常解压。所以建议解压jar文件替换go标准库里的zip解压工具。详情见这个issue https://github.com/golang/go/issues/51337
Improve Python parsing ability: resolve dependencies by calling the command of Package Manager installation dependency
Metadata
Owner
Metadata
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the...