scancode.io icon indicating copy to clipboard operation
scancode.io copied to clipboard

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabas...

Results 313 scancode.io issues
Sort by recently updated
recently updated
newest added

When I run SCIO from the CLI, I would like to list which pipelines are available and installed. Something like: `./manage.py list-pipelines` that would list the pipelines with some minimal...

This is a series of follow up refinements after: - https://github.com/aboutcode-org/scancode.io/issues/1366 These are some improvement to consider for metadata and Kotlin: - [ ] https://github.com/aboutcode-org/scancode.io/issues/1378 - [ ] https://github.com/aboutcode-org/scancode.io/issues/1392 And...

This is a follow up to https://github.com/aboutcode-org/scancode.io/issues/1371 We already use directory matching to account for the specific of Android. - from https://github.com/aboutcode-org/scancode.io/issues/1371#issuecomment-2347234311 by @mjherzog we may want to investigate more...

This is a follow from https://github.com/aboutcode-org/scancode.io/issues/1372#issuecomment-2357828400 by @chinyeungli :+1: > This is a little sample d2d note when I compile an APK from kotlin sources > > I created an...

Using https://github.com/projectcalico/calico.git input I get this: ``` Run log 2024-09-04 09:54:08.47 Pipeline [scan_single_package] starting 2024-09-04 09:54:08.47 Step [download_missing_inputs] starting 2024-09-04 09:54:08.47 Fetching input from https://github.com/projectcalico/calico.git 2024-09-04 09:54:10.85 Step [download_missing_inputs] completed...

Android has many unique formats such as: - DEX - OAT - ART - ODEX - Other binary XML formats We need to get a good handle on what these...

I would like to use a PURL as a project input like with `pkg:pypi/[email protected]`

We have the feature to compare two products in DejaCode. I would like here to compare two projects instead. The comparison would ideally be based primarily on packages and detections...