scancode.io icon indicating copy to clipboard operation
scancode.io copied to clipboard

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabas...

Results 313 scancode.io issues
Sort by recently updated
recently updated
newest added

Following #444 and #485 and a discussion with @pombredanne: we do track package instances correctly in case of scan-codebase pipeline and create separate instances for the same package correctly. But...

I have about 100,000 packages in a scan: ``` 2023-11-26 14:51:19.56 Step [populate_purldb_with_detected_purls] starting 2023-11-26 14:51:27.33 Populating PurlDB with 93,086 detected PURLs 2023-11-26 15:03:36.83 Progress: 10% (94/931) ETA: 6565 seconds...

It would be nice to have a config (with path patterns) to ignore and silence some recurring Resources flagged as "requires-review". This would be different from the regular ignores. This...

devel-deploy

We should consider to create the project workspace directory using a slug-like name (at least without spaces). This helps when iterating over the directories

nice-to-have

I got this exception while scanning my project: Any idea what's wrong here ? ![image](https://github.com/nexB/scancode.io/assets/128488364/44cac1e0-b703-4d75-98f5-3f39dc2682fc) Version: ![image](https://github.com/nexB/scancode.io/assets/128488364/a5e85a89-ae98-4ed9-accd-02fef87312d6)

JSP deployment analysis is not straight forward because of the multiple indirection and transpilation to Java and compilation to bytecode. We may be able to use source-classes-mapping.txt for JSP mapping....

Assuming that there are multiple sources of curated, corrected or reviewed, I would like to have a pipeline that works with the PurlDB and these other sources of curated data....

I create a project and I add a few inputs with a click to open a file picker. Then again I click to open a file picker again and select...